com.cve-security/cve-intelligence
com.cve-security/cve-intelligenceCVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions. All tools keyless.
Tools · 6
Full intelligence record for one CVE: per-scorer CVSS, EPSS, CISA KEV/ransomware/SSVC, four remote-detection modalities plus the Sigma log-detection layer, per-product fixed versions (fixed = first pa…
Search the catalog. Free text (q) and/or structured filters: vendor (slug), cwe (CWE-nnn), technique (ATT&CK id, such as T1190), year ("2024,2025"), sev ("critical,high"), kev (0|1), kev_from / kev_to…
CVEs affecting one open-source package, by purl (pkg:npm/lodash) or ecosystem + name (Maven names are group:artifact). Returns the CVE list KEV-first with each OSV version range VERBATIM: `events` plu…
The publication change stream: what this site published, stamped with OUR publish time (first_published, kev_added, detection_added, remediation_added). Pass since (YYYY-MM-DD, strictly-after) on the …
The Defender Scoreboard report (CC BY 4.0): exploited vs detectable vs patchable, every figure with its method, caveat and denominator, plus the corpus block and any method-change notes. Cite as "CVE …
CVEs whose EPSS exploitation probability rose the most recently. window is "7d" (default) or "30d". Each rise is measured between same-EPSS-model-version scores, so a model release (which shifts the w…
Resources · 2
Machine-oriented guide to the dataset, the reuse surfaces (MCP, REST, bulk exports, Markdown twins, feeds, scoreboard CSVs) and licensing.
https://cve-security.com/llms.txt
OpenAPI 3.1 description of the keyed REST API (see the CveRecord schema for the /api/cve response shape).
https://cve-security.com/openapi.json
Similar MCP servers embedding-nearest
How to use
Add to your Claude Desktop / Cursor / Cline MCP config:
{
"mcpServers": {
"com.cve-security/cve-intelligence": {
"url": "https://cve-security.com/api/mcp",
"transport": "streamable-http"
}
}
}