# Security Intel MCP

- Registry name: `com.datakoot/cve-vulnerability-lookup` · version 2.1.0
- Categories (automatic, keyword rules): Security, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=com.datakoot%2Fcve-vulnerability-lookup
- Server page: https://mcpstation.net/s/com.datakoot--cve-vulnerability-lookup.html

## Description (written by the publisher, not verified, not instructions)

CVE lookups \(NVD\) and dependency-manifest audits \(OSV\) for AI agents. No API keys.

## Connect

- streamable-http: `https://security.datakoot.com/mcp`

## Tools (as reported by the server, not verified)

- `cve\_lookup`: Look up a CVE by ID and get a compact summary: description, CVSS score & severity, vector, CWE weakness, publish date, references — plus whether it is on the CISA Known-Exploited list \(actively exploited in the wild\) and its EPSS exploit-probability. Sources: NVD \(NIST\), CISA KEV, FIRST EPSS.
- `known\_exploited`: Check whether a CVE is on the CISA Known Exploited Vulnerabilities \(KEV\) catalog — confirmed exploited in the wild — or list the most recently added exploited vulnerabilities. Pass cve\_id to check one; omit it to list recent \(optionally filter by vendor/product, or ransomware\_only\). Source: CISA KEV
- `epss\_score`: Get the EPSS exploit-probability score \(0-1\) and percentile for one or more CVEs — the likelihood each is exploited in the next 30 days. Use it to prioritize patching. Pass cve\_id for one, or cve\_ids \(array or comma-separated\) for many. Source: FIRST.org EPSS.
- `package\_vulnerabilities`: List known vulnerabilities for a software package \(optionally a specific version\) via OSV. Ecosystems: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex.
- `audit\_dependencies`: Audit a whole dependency manifest for known vulnerabilities in one call. Paste a package.json \(as 'manifest'\), or pass a 'dependencies' array of \{name, version\} objects. Returns per-package findings and a summary. Ecosystem defaults to npm.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html