{"name":"io.github.robertoyanguas-ops/cve-intel-mcp","slug":"robertoyanguas-ops-cve-intel-mcp","title":null,"description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re","url":"https://mcp.market/server/robertoyanguas-ops-cve-intel-mcp","rating":null,"grade":"C","score":67,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":5,"stars":null,"forks":null,"downloads_week":null,"last_push_at":null,"license":null},"uptime":{"percent":100,"checks":26,"ok":26,"last_checked_at":"2026-11-02T11:05:26.629Z","last_ok_at":"2026-11-02T11:05:26.629Z","latency_ms":156},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":null,"website":null,"version":"1.0.0","remotes":[{"type":"streamable-http","url":"https://cve-intel-72343955726.us-central1.run.app/mcp/cve-intel"}],"packages":[],"tools":[{"name":"get_agent_wallet_status","description":"Inspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other tools on this server for execution. PARAMETER INTERACTIONS: Omit agent_id to inspect the default trial account derived from your client IP, or pass your explicit agent_id or agd_pass_ session key to check a specific funded wallet. Free and read-only: never charges a fee or consumes a free trial call. Example: get_agent_wallet_status(agent_id='example')","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"agent_id":{"minLength":1,"maxLength":256,"type":"string","description":"Optional Agent ID or agd_pass_ session key to inspect. Omit to check the default wallet derived from your client IP."}},"additionalProperties":false,"examples":[{"agent_id":"example"}]}},{"name":"scan_package_cve_advisories","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. WHEN TO USE: Call `scan_package_cve_advisories` when your task requires deterministic `cve-intel` analysis for `package`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `package` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: scan_package_cve_advisories(package='example')","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"package":{"minLength":1,"maxLength":99999,"type":"string","description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')."},"agent_id":{"minLength":1,"maxLength":256,"type":"string","description":"Optional agent identifier or prepaid agd_pass_ session key. Omit during your 5 free trial calls to use an ID automatically derived from your client IP, or pass your agd_pass_ key after topping up."},"tx_hash":{"minLength":10,"maxLength":256,"type":"string","description":"Optional on-chain Base Mainnet (0x...) or Solana SPL USDC transaction hash. Omit unless settling an individual call directly on-chain instead of using an agd_pass_ key in agent_id."}},"required":["package"],"additionalProperties":false,"examples":[{"package":"example"}]}}],"scan":{"score":67,"grade":"C","scanned_at":"2026-10-27T18:17:22.228Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-27T18:17:22.178Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 302ms"]},"poisoning":{"score":15,"max":15,"notes":["2 tool descriptions checked"]},"auth":{"score":10,"max":15,"notes":["open endpoint, read-only tools"]},"maintenance":{"score":3,"max":15,"notes":["no repository listed"]},"identity":{"score":2,"max":10,"notes":["no repository or website to verify"]}},"findings":[{"id":"maint.no-repo","severity":"low","component":"maintenance","title":"No source repository listed"}],"inputs":{"probes":[{"url":"https://cve-intel-72343955726.us-central1.run.app/mcp/cve-intel","reachable":true,"authRequired":false,"latencyMs":302,"serverInfo":{"name":"cve-intel-mcp","version":"7.0.16"}}],"packages":[],"repo":{"found":false},"icon":{"url":null,"source":"none"},"presence":{"stars":null,"forks":null,"downloadsWeek":null,"license":null,"lastPushAt":null,"score":5}}}},"grade_history":[],"reviews":[]}