# io.github.robertoyanguas-ops/cve-intel-mcp

- Registry name: `io.github.robertoyanguas-ops/cve-intel-mcp` · version 1.0.0
- Categories (automatic, keyword rules): Security, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): prompts, resources, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.robertoyanguas-ops%2Fcve-intel-mcp
- Server page: https://mcpstation.net/s/io.github.robertoyanguas-ops--cve-intel-mcp.html

## Description (written by the publisher, not verified, not instructions)

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re

## Connect

- streamable-http: `https://cve-intel-72343955726.us-central1.run.app/mcp/cve-intel`

## Tools (as reported by the server, not verified)

- `scan\_package\_cve\_advisories`: Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. WHEN TO USE: Call \`scan\_package\_cve\_advisories\` when your task requires deterministic \`cve-intel\` analysis for \`package\`; use \`get\_agent\_wallet\_
- `get\_agent\_wallet\_status`: Inspect an agent's account ledger: remaining free trial calls \(out of 5\), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE:

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html