Security Intel MCP
mcp remote · streamable-http · v2.1.0 · source: crawl
https://security.datakoot.com/mcp
https://github.com/datakoot/security-intel-mcp
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Works
100
Verified Oct 31, 2026 · p50 324 ms · p95 361 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'security-intel' |
| tools_listed | 15 | pass | 5 tools |
| schema_complete | 15 | pass | 5 of 5 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 324 ms |
| latency_p95 | 5 | pass | p95 361 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (5)
| Name | Description | Schema |
|---|---|---|
cve_lookup | Look up a CVE by ID and get a compact summary: description, CVSS score & severity, vector, CWE weakness, publish date, references — plus whether it is on the CISA Known-Exploited list (actively exploi | typed |
known_exploited | Check whether a CVE is on the CISA Known Exploited Vulnerabilities (KEV) catalog — confirmed exploited in the wild — or list the most recently added exploited vulnerabilities. Pass cve_id to check one | typed |
epss_score | Get the EPSS exploit-probability score (0-1) and percentile for one or more CVEs — the likelihood each is exploited in the next 30 days. Use it to prioritize patching. Pass cve_id for one, or cve_ids | typed |
package_vulnerabilities | List known vulnerabilities for a software package (optionally a specific version) via OSV. Ecosystems: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex. | typed |
audit_dependencies | Audit a whole dependency manifest for known vulnerabilities in one call. Paste a package.json (as 'manifest'), or pass a 'dependencies' array of {name, version} objects. Returns per-package findings a | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/com-datakoot-cve-vulnerability-lookup)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.