Mmcp.market

Exploitwatch MCP server

by www.edgethirteen.com·com.edgethirteen.www/exploitwatch·v1.0.0
No reviews yet

Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.

C69/100grade C
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
C69/100

full report

Adoption
New

Little public usage data yet

Reviews

Write one

Nobody has reviewed Exploitwatch yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Exploitwatch tools (1)

write = sends, deletes, buys or posts
  • check_dependencies_against_kevFree

    Check a comma-separated list of software dependency/product names against CISA's live Known Exploited Vulnerabilities (KEV) catalog. Returns any matches with the CVE, vulnerability name, and why it matched. Call this before shipping or during a dependency/security review to catch actively-exploited components, or when working out whether an EU Cyber Resilience Act Article 14 reporting obligation (the 24h early warning / 72h notification / 14-day final report clock) has been triggered. Matching is by name and deliberately errs towards over-matching, so review each hit before acting on it. The free check returns every raw match; the triaged Article 14 exposure report with the notification clock computed and ENISA fields pre-filled is a separate $299 product at https://www.edgethirteen.com/tools/exploit-watch.

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

1 low
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 397ms20/20
  • Tool poisoning1 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenanceno repository listed3/15
  • Maintainer identityverified namespace with website, no repo4/10

Findings (1)

  • lowNo source repository listedmaint.no-repo
Overall 69/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

claude mcp add --transport http exploitwatch https://www.edgethirteen.com/api/mcp/exploitwatch
Add to Cursor

Exploitwatch: common questions

Is Exploitwatch MCP server safe?
With care: it is graded C, so read the findings first (69/100). Read the Exploitwatch safety report
How do I install Exploitwatch?
It runs remotely at www.edgethirteen.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Exploitwatch need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Exploitwatch maintained?
The latest release is v1.0.0.
Is Exploitwatch up?
100% of our last 1 checks got an answer. We check remote servers about four times a day.

More from www.edgethirteen.com →