MCP servers tagged cve
54 live MCP servers tagged "cve", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with cve.
SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Viper
🛡️ VIPER: Stay ahead of threats with AI-driven vulnerability intelligence. Prioritize CVEs effectively using NVD, EPSS, CISA KEV, and Google Gemini insights, all on an interactive…
Shodan MCP
Shodan MCP server for Claude, Cursor & VS Code. 20 tools for passive reconnaissance, CVE/CPE intelligence, DNS analysis, and device search. 4 tools work free without an API key. O…
Eip MCP
Exploit Intelligence Platform MCP Server
PoC In GitHub
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
Cve Search
cve-search - a tool to perform local searches for known vulnerabilities
AI Security Tool
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for aut…
ARL Next
🚀 自动化资产侦察与漏洞监控平台 (ARL-Next)。重构自经典 ARL，全面升级 Puppeteer + Nuclei 引擎，打通「天眼查/ICP ➔ 资产发现 ➔ 漏洞扫描 ➔ 威胁情报追踪」安全闭环。支持 Docker 极简部署，AI 二开友好。
0
A cybersecurity harness for full-stack LLM-driven penetration testing. Find and fix vulnerabilities autonomously, 24/7. [RESEARCH PREVIEW]
Hacker Bob
A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/…
0sec
[RESEARCH PREVIEW] The open & extensible cybersecurity harness - by the Swiss Applied AI Cybersecurity Research Lab.
Vulnometry
Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS, CISA KEV, OSV and GHSA.
Awesome AI Agent Attacks
A curated timeline of real AI agent security incidents, breaches, and vulnerabilities (2024-2026). Every entry sourced and dated.
Orca AI Incident Archive
An open database of real-world AI agent incidents.
Cache Commander
Cache Commander — a TUI and MCP server to explore, audit, and clean developer cache directories. Scan for CVEs, find outdated packages, reclaim disk space. Supports pip, npm, Carg…
Remotepower
Server management dashboard, CVE-scanner, patch-mangement, SNMP-polling, monitoring, MCP-server, drift-detection, Proxmox. Basically a swiss-knife! AIO.
supply-chain-mcp-server
90-tool MCP server for software supply chain security — OSV, GHSA, NVD, EPSS, CISA KEV, npm, PyPI, crates.io, RubyGems, NuGet, Packagist, Go, deps.dev, Scorecard, Rekor, ClearlyDe…
Echelongraph
EchelonGraph CVE and internet-exposure data as an MCP server: CVEs with EchelonGraph multi-source scores, CISA-KEV and EPSS, plus a per-CVE internet-exposure footprint derived fro…
Blitzstrike
⚡ Blitz Strike — a universal MCP penetration-testing toolbelt. Structured methodology: reconnaissance & attack-surface mapping, source-to-sink analysis, and live validation. 57 es…
Hacker Agent
hacker-agent
BadHost CVE 2026 48710 Exploit
Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI
ThreatIntelMCP
A production-oriented Threat Intelligence platform that collects, enriches, and serves cybersecurity intelligence using Python, PostgreSQL, AI, and the Model Context Protocol (MCP…
Threat Intelligence Pipeline
Correlates every NVD CVE with CWE, CAPEC, ATT&CK, D3FEND, OWASP, CISA KEV, Vulnrichment SSVC, and EPSS, with APT links only where MITRE ATT&CK cites the CVE. Search-first web app,…
Cve Lookup
Context for a CVE from EchelonGraph’s CVE Pulse API (CLI + MCP) — CVSS, CISA KEV, EPSS, SSVC, exploit and patch signals, product matching, vendor advisories and the internet-expos…
Skill Security Vulnerability Management
Security vulnerability skill — CVE search, dependency audit, risk scoring, remediation plans
Vulnerability Intelligence MCP Server
Built for security professionals, developers, and DevSecOps teams who need reliable vulnerability intelligence integrated directly into their development workflow.
Circl Cve Search MCP Server
MCP server for CIRCL CVE Search API with intelligent risk assessment and comprehensive vulnerability analysis.
toan203/osv-ui
loop), applies fixes with explicit confirmation. Powered by OSV.dev.
Nsauditor AI
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration.…
Pocmap
MCP-native CVE, PoC & exploit discovery toolkit (Metasploit, Nuclei, GitHub & more)
Checkexploit
Scanners flag CVEs. CheckExploit proves which ones actually reach your code — by running the real exploit against your actual code inside an isolated sandbox. Supports Python,Node…
Cve Intel
Multi-source CVE Intelligence MCP Server — combines NVD, CISA KEV, and EPSS for AI-powered vulnerability analysis
Prescryb
MCP server for CVE/config remediation orchestration: SSH inventory, OSV/NVD lookups, CIS/DISA STIG-mapped Ansible playbook suggestions.
Dfir MCP Server
MCP server exposing 98 DFIR & threat intelligence tools for AI agents — IOC checking, CVE lookup, threat actor enrichment, phishing analysis, and more. Built on Cloudflare Workers.
Nsauditor AI Agent Skill
AI Agent Skill for NSAuditor AI — gives any AI coding agent built-in knowledge of NSAuditor's MCP tools, schemas, plugins, and security audit workflows. Works with Claude Code, Cu…
PatrowlIntelMCP
A thin, read-only MCP server that brings PatrowlIntel CVE, EPSS, CISA KEV, exploit, and trending-attack data into Claude and any MCP client.
Cveasy MCP
MCP server for CVEasy AI — connect Claude Desktop & Claude Code to your live CVEasy install. Thin client over the CVEasy REST API.
Shellockolm AI CLI MCP Scanner
Welcome to Shellockolm-ai-CLI-MCP-Scanner - 🎯 Your React app is probably vulnerable. Find out in 30 seconds 🚀
Dtrack MCP
Read-mostly MCP server for Dependency-Track: AI-powered vulnerability triage with alias dedup, cross-project duplicate discovery, diff + carry-over between versions, and broadcast…
Offsec MCP
MCP server that gives AI agents authorized-only offensive-security tools: recon, CVE intel, JS analysis, port scanning
Pkgseek Skills
One Linux Agent Skill for package errors, CVE/CNNVD, distro migration, ELF/ABI, command portability, and containers, powered by PkgSeek.
Threatintel
Threat intelligence MCP server for Claude Code. IOC lookups, CVE checks, breach monitoring, dark web search, and OTX pulses.
Blastradius MCP
Cross-repo infrastructure memory for coding agents — knows who else depends on an artifact before you change it, and watches your pins for CVEs.
Win11 Forge
Standalone Windows-CVE lab harness. Builds a Win11 LTSC 24H2 gold image once, spawns KVM or VMware kernel-debug VM pairs in minutes with live MCP endpoints for AI-driven analysis.
Qanvuli
Local vulnerability database and scanner for CVE, OSV, CWE, CAPEC, KEV and EPSS — CLI, TUI and MCP.
Threat Intelligence MCP
MCP server for the ThreatCluster threat intelligence API: incident clusters, IOCs, CVEs, ransomware leak-site victims and entity profiles as tools for Claude, Cursor, VS Code and…
Cpe Skills
Comprehensive CPE (Common Platform Enumeration) toolkit — SKILLS, Go SDK, CLI & MCP integration for parsing, matching, generation, storage and NVD integration. ≥91% coverage, 108…
Guardx MCP
Defensive MCP server: secret scanning, dependency CVE auditing, and breached-password checks.
Askcast Kiropower
A Kiro power for Ask CAST (MCP) to conversationally explore your Software Intelligence insights.
Context Snipe
Deterministic dependency + CVE context for AI coding tools, over the Model Context Protocol. A ~0.85 MB pure-Rust MCP server.