cve mcp servers

35 tagged cve, measured the same way as everything else here.

Browse within: epss 7cybersecurity 6cisa-kev 5

cve-mcp

01

mukul975/cve-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "cve-mcp" as configured in mukul975/cve-mcp-server. Runs cve_mcp.server with python. Needs 4 environment variables to run.

1.3k 27d ago A tokens not measured original Apache-2.0

hacker-bob

02

vmihalis/hacker-bob

MCP server Claude CodeCodexCursor +2

MCP server "hacker-bob" as configured in vmihalis/hacker-bob. Runs ../../../mcp/server.js with node.

97 3d ago A tokens not measured original Apache-2.0

brutalist

03

vmihalis/hacker-bob

MCP server Claude CodeCodexCursor +2

Deploy Claude Code, Codex & Antigravity (agy) CLI agents to demolish your work before users do. Real file analysis. Brutal honesty. Per-call model pinning, conversation continuation & intelligent pagination. Runs locally from the @brutalist/mcp npm package.

97 3d ago A tokens not measured original Apache-2.0

api

04

UPinar/contrastapi

MCP server Claude CodeCodexCursor +2

31 tools: CVE (340K+ EPSS/KEV), OSINT, threat intel, dep audit, code sec. No API key needed. Remote server at api.contrastcyber.com.

33 7d ago A tokens not measured original MIT

mcp-simple-tool

05

firetix/vulnerability-intelligence-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "mcp-simple-tool" as configured in firetix/vulnerability-intelligence-mcp-server. Runs locally from the mcp-simple-tool Python package.

9 1y ago A tokens not measured copy · 100% MIT

mcp-nvd

06

gkhays/mcp-nvd-server

MCP server Claude CodeCodexCursor +2

An MCP server to interact with a the NVD Database API. Runs locally from the mcp-nvd Python package.

7 1y ago A tokens not measured original Apache-2.0

github-advisory-mcp

07

microsoft/github-advisory-mcp

MCP server Claude CodeCodexCursor +2

MCP server "github-advisory-mcp" as configured in microsoft/github-advisory-mcp. Runs locally from the @microsoft/github-advisory-mcp npm package.

6 2mo ago A tokens not measured original MIT

pocmap

08

zebbern/pocmap

MCP server Claude CodeCodexCursor +2

MCP server "pocmap" as configured in zebbern/pocmap. Runs pocmap.mcp_server with python. Needs 1 environment variable to run.

5 8d ago A tokens not measured original MIT

patch-tuesday

09

jonnybottles/patch-tuesday-mcp

MCP server Claude CodeCodexCursor +2

MCP server for Microsoft Patch Tuesday security updates (MSRC Security Update Guide). Runs locally from the patch-tuesday-mcp Python package.

4 20d ago A tokens not measured

badchars/supply-chain-mcp-server

MCP server Claude CodeCodexCursor +2

Software supply chain security MCP server — vulnerability scanning, package analysis, provenance verification, typosquatting detection, dependency intelligence across npm, PyPI, crates.io, Go, and more. Runs locally from the supply-chain-mcp-server npm package.

3 20d ago A tokens not measured original MIT

mcp-threatintel

11

pete-builds/mcp-threatintel

MCP server Claude CodeCodexCursor

MCP server "mcp-threatintel" as configured in pete-builds/mcp-threatintel. Runs locally from the mcp-threatintel Python package.

2 2d ago A tokens not measured original MIT

dep-diff

12

DigiCatalyst-Systems/dep-diff-mcp

MCP server Claude CodeCodexCursor

MCP server that translates a lockfile diff into a human-readable upgrade plan. Runs locally from the @digicatalyst/dep-diff-mcp npm package.

2 7d ago A tokens not measured original MIT

dep-diff-mcp

13

DigiCatalyst-Systems/dep-diff-mcp

MCP server Claude CodeCodexCursor

Translates a lockfile diff into a human-readable upgrade plan for npm and PyPI. Runs locally from the @digicatalyst/dep-diff-mcp npm package.

2 7d ago A tokens not measured copy · 86% MIT

gen0sec/mcp-server

MCP server Claude CodeCodexCursor

MCP server "gen0sec-waf-rule-mcp" as configured in gen0sec/mcp-server. Runs locally from the gen0sec-waf-rule-mcp Python package.

1 19d ago A tokens not measured

prescryb

15

konstruktoid/prescryb

MCP server Claude CodeCodexCursor

MCP server "prescryb" as configured in konstruktoid/prescryb. Runs locally from the prescryb Python package.

1 4d ago A tokens not measured

nist-nvd-mcp-server

16

cyanheads/nist-nvd-mcp-server

MCP server Claude CodeCodexCursor

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE. Runs locally from the @cyanheads/nist-nvd-mcp-server npm package. Needs 3 environment variables to run.

1 7d ago A tokens not measured original Apache-2.0

onefreeman1337/osf-data-marketplace

MCP server Claude CodeCodexCursor

MCP server for OSF, Open Source Filings. Federal debarment and exclusion screening that sanctions APIs do not cover: 259,803 SAM.gov exclusions, HHS OIG LEIE healthcare exclusions, World Bank debarment and Federal Reserve enforcement, screened alongside O. Runs locally from the osf-data-marketplace npm package.

0 26d ago A tokens not measured original MIT

security-intel-mcp

18

datakoot/security-intel-mcp

MCP server Claude CodeCodexCursor

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys. Remote server at security.datakoot.com.

0 17d ago A tokens not measured original MIT

cyber-intel-mcp

19

FoundryNet/cyber-intel-mcp

MCP server Claude CodeCodexCursor

CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed. Remote server at cyber-intel-mcp-production.up.railway.app.

0 21d ago A tokens not measured original MIT archived

purify-feeds-mcp

20

eason4kim-rocket/purify-feeds-mcp

MCP server Claude CodeCodexCursor

MCP server "purify-feeds-mcp" as configured in eason4kim-rocket/purify-feeds-mcp. Runs in Docker (ghcr.io/eason4kim-rocket/purify-feeds-mcp:1.0.1). Needs 2 environment variables to run.

0 1mo ago A tokens not measured original MIT

dep-oracle

21

ertugrulakben/dep-oracle

MCP server Claude CodeCodexCursor

Predictive dependency security engine. Trust scores, zombie detection, blast radius analysis. Runs locally from the dep-oracle npm package.

0 5mo ago A tokens not measured original MIT

vuln-intel

22

rozetyp/vuln-intel-mcp

MCP server Claude CodeCodexCursor

Hosted CVE + bug-bounty-mechanic MCP: exploitation-first ranking, CVE fact-check, mechanic transfer. Remote server at mcp.rozetyp.com.

0 1mo ago A tokens not measured

security-intel

23

romans-repos/elsas-verify

MCP server Claude CodeCodexCursor

Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402. Remote server at elsas.it.

0 2mo ago A tokens not measured original MIT

dtrack-mcp

24

drewrukin/dtrack-mcp

MCP server Claude CodeCodexCursor

Read-mostly MCP server for Dependency-Track with version lifecycle, single-call triage, duplicate-filtering ergonomics, strict input validation, broadcast triage, cross-project vulnerability search, and transient-failure retry. Runs locally from the dtrack-mcp Python package.

0 4mo ago A tokens not measured original MIT