Vulnerability Intel MCP

Defensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS, affected products, and remediation links.

$9/mo 6 tools cited sources live cvevulnerabilitiessecuritydefensive Subscribe

Tools

cve_lookup	Lookup a CVE by ID using the public NVD API.
cve_keyword_search	Search public NVD CVEs by keyword.
recent_critical_cves	Return NVD CVEs with CVSS v3 critical severity where available.
package_advisories	Advisories affecting a package, from OSV.dev. Replaces a GitHub GraphQL tool that required GITHUB_TOKEN and so returned setup instructions instead of data. OSV aggregates the GitHub Advisory Database along with PyPA, RustSec, Go, OSS-Fuzz and distro trackers, and serves it to anyone. ecosystem: PyPI, npm, Maven, Go, crates.io, NuGet, Packagist, RubyGems, Debian, Alpine and others. Maven wants full coordinates, e.g. 'org.apache.logging.log4j:log4j-core'.
advisory_details	Full detail for one advisory or CVE id, from OSV.dev. Accepts GHSA-, CVE-, PYSEC-, RUSTSEC- and similar identifiers.
remediation_checklist	Return a defensive remediation workflow checklist for a CVE or product vulnerability search.