MCP.Market

Security Intel MCP server

online · 100% uptime
by datakoot.com·com.datakoot/cve-vulnerability-lookup·v2.1.0
No reviews yet

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

A91/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A91/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Security Intel MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Security Intel MCP tools (5)

write = sends, deletes, buys or posts
  • audit_dependenciesFree

    Audit a whole dependency manifest for known vulnerabilities in one call. Paste a package.json (as 'manifest'), or pass a 'dependencies' array of {name, version} objects. Returns per-package findings and a summary. Ecosystem defaults to npm.

  • cve_lookupFree

    Look up a CVE by ID and get a compact summary: description, CVSS score & severity, vector, CWE weakness, publish date, references — plus whether it is on the CISA Known-Exploited list (actively exploited in the wild) and its EPSS exploit-probability. Sources: NVD (NIST), CISA KEV, FIRST EPSS.

  • epss_scoreFree

    Get the EPSS exploit-probability score (0-1) and percentile for one or more CVEs — the likelihood each is exploited in the next 30 days. Use it to prioritize patching. Pass cve_id for one, or cve_ids (array or comma-separated) for many. Source: FIRST.org EPSS.

  • known_exploitedFree

    Check whether a CVE is on the CISA Known Exploited Vulnerabilities (KEV) catalog — confirmed exploited in the wild — or list the most recently added exploited vulnerabilities. Pass cve_id to check one; omit it to list recent (optionally filter by vendor/product, or ransomware_only). Source: CISA KEV, updated ~daily.

  • package_vulnerabilitiesFree

    List known vulnerabilities for a software package (optionally a specific version) via OSV. Ecosystems: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex.

Public scan report

scanner v0.1.10 · 2026-10-16 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 254ms20/20
  • Tool poisoning5 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 2 days ago15/15
  • Maintainer identityendpoint served from the registry-verified namespace domain8/10
Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Security Intel MCP compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
91/100
higher than 90% of 915 Security servers
Tools
5
the typical Security server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote Security server answers 100%
Response time
39 ms
faster than 96% of 547 Security servers

What its tools let an agent do: 5 read

Install Security Intel MCP in Claude Code, Cursor or VS Code

claude mcp add --transport http cve-vulnerability-lookup https://security.datakoot.com/mcp
Add to Cursor

What the publisher says

From the Security Intel MCP repository's README, as published. We do not edit it. Read it on GitHub

Security Intel MCP — by Datakoot

Vulnerability intelligence for AI agents — as MCP tools your agent can call mid-task. No API keys.

Tools

No API keys required for any tool.

Quick start

claude mcp add --transport http security-intel https://security.datakoot.com/mcp

Or point any MCP client at https://security.datakoot.com/mcp.

Try it in 10 seconds — no key, no signup

Paste this into a terminal:

curl -s https://security.datakoot.com/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": {"name": "cve_lookup", "arguments": {"cve_id": "CVE-2021-44228"}}}'

You get the full NVD record for Log4Shell (CVE-2021-44228) — severity, CVSS vector, affected products — no API key, nothing to sign up for.

Or point any MCP client at the URL and just ask your agent, in plain language:

  • "Is CVE-2021-44228 something I need to worry about?"
  • "Audit my package.json for known vulnerabilities before I deploy."

Data & attribution

Vulnerability data comes from the National Vulnerability Database (NIST — US public domain) and OSV.dev (CC-BY 4.0), the same open source used by scanners like Trivy and Grype.

Part of Datakoot — keyless intelligence APIs for AI agents.

Nothing above is checked by us. What we check is on the safety report.

Security Intel MCP: common questions

Is Security Intel MCP server safe?
Yes, by our scan: it is graded A (91/100). Read the Security Intel MCP safety report
How do I install Security Intel MCP?
It runs remotely at security.datakoot.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Security Intel MCP need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Security Intel MCP maintained?
The last commit was 21 days ago (2026-10-15). The latest release is v2.1.0.
Is Security Intel MCP up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Security Intel MCP?
Servers from other publishers that do the same job: npm Registry MCP Server, Dependency Auditor MCP server and Dependency Auditor MCP server.
How does Security Intel MCP compare with other Security MCP servers?
safety score 91/100 (higher than 90% of 915 Security servers); tools 5 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Security Intel MCP

Same job from other publishers: the closest match first, then the best rated.

More from datakoot.com →