Back to search
100
MCP live MCP 2025-06-18 streamable-http

com.cve-security/cve-intelligence

com.cve-security/cve-intelligence

CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions. All tools keyless.

Watch this dependency

Get before/after evidence when observed tools, schemas, authentication access, availability or the endpoint changes.

Inspect evidence and set up a watch Share public evidence report
Uptime
100.0%
5 direct probes · 30d
Response
276ms
last probe
Tools
9
callable
Resources
2
readable
Prompts
0
available
Primary URL
https://cve-security.com/api/mcp
Score: 100/100
Handshake verified by our own probe.
why this score
pass Answers the MCP handshake 50/50
The handshake and the list calls succeeded on the primary URL.
pass Lists tools, resources or prompts 30/30
9 tools, 2 resources, 0 prompts returned.
pass 3 or more catalogue items 10/10
11 items in total; 3 or more earns these points.
pass Describes itself 10/10
97 characters; more than 30 earns these points.

Tools · 9

get_cve

Full intelligence record for one CVE: per-scorer CVSS, EPSS, CISA KEV/ransomware/SSVC, four remote-detection modalities (the checks that work over the network) plus a host-check tier (self-contained N…

search_cves

Search the catalog. Free text (q) and/or structured filters: vendor (slug), cwe (CWE-nnn), technique (ATT&CK id, such as T1190), year ("2024,2025"), sev ("critical,high"), kev (0|1), kev_from / kev_to…

query_package

CVEs affecting one open-source package, by purl (pkg:npm/lodash) or ecosystem + name (Maven names are group:artifact). Returns the CVE list KEV-first with each OSV version range VERBATIM: `events` plu…

get_updates

The publication change stream: what this site published, stamped with OUR publish time (first_published, kev_added, detection_added, remediation_added, first_sighted, chain_added, and the BOD 26-04 Ta…

get_scoreboard

The Defender Scoreboard report (CC BY 4.0): exploited vs detectable vs patchable, every figure with its method, caveat and denominator, plus the corpus block and any method-change notes. Cite as "CVE …

get_sightings

Field sightings: CVEs a named sensor network recorded in the last 7 or 30 days, most sighting days first. A field sighting is a day on which Shadowserver honeypots (cited by VulnCheck KEV and publishe…

get_chains

Known Chained Vulnerabilities™: pairs of CVEs that a cited source reports were used together in one exploit chain (VulnCheck KEV entry text, Metasploit modules, SigmaHQ rules, press, research or acade…

get_epss_movers

CVEs whose EPSS exploitation probability rose the most recently. window is "7d" (default) or "30d". Each rise is measured between same-EPSS-model-version scores, so a model release (which shifts the w…

table1_read

BOD 26-04 Table 1 read for up to 50 CVEs at a stated asset exposure. Per CVE this dataset supplies CISA KEV status and due date, CISA's SSVC Automatable and Technical impact (Vulnrichment) and CISA's …

Resources · 2

llms.txt

Machine-oriented guide to the dataset, the reuse surfaces (MCP, REST, bulk exports, Markdown twins, feeds, scoreboard CSVs) and licensing.

https://cve-security.com/llms.txt
openapi

OpenAPI 3.1 description of the keyed REST API (see the CveRecord schema for the /api/cve response shape).

https://cve-security.com/openapi.json

How to use

Add to your Claude Desktop / Cursor / Cline MCP config:

{
  "mcpServers": {
    "com.cve-security/cve-intelligence": {
      "url": "https://cve-security.com/api/mcp",
      "transport": "streamable-http"
    }
  }
}