Cybersecurity Vulnerability Intel
A unified intelligence layer over four government vulnerability databases: NIST NVD for CVE details and CVSS scores, CISA KEV for actively exploited vulnerabilities, FIRST.org EPSS for exploitation probability predictions, and MITRE ATT&CK for adversary technique mappings. The standout is vuln_lookup_cve, which enriches a single CVE with all four data sources in one call. You also get search across the NVD with KEV filtering, KEV entries with approaching remediation deadlines, top EPSS scores for exploitation likelihood, and vendor specific vulnerability assessments. Reach for this when you need to triage vulnerabilities, prioritize patches based on active exploitation and probability data, or track CISA compliance deadlines. Available over streamable HTTP via Apify or stdio locally with optional NVD API key for higher rate limits.
- tools
- 7
- transport
- HTTP
- last updated
- Feb 27, 2026
Tools
7 toolsPublic tool metadata for what this MCP can expose to an agent.
vuln_lookup_cveEnriched CVE Lookup: look up any CVE and get intelligence from all 4 sources in a single call.
Enriched CVE Lookup: look up any CVE and get intelligence from all 4 sources in a single call.
No parameter schema in public metadata yet.
vuln_searchSearch the NVD by keyword, severity, and date range, optionally filtering to only actively exploited (KEV) vulnerabilities.
Search the NVD by keyword, severity, and date range, optionally filtering to only actively exploited (KEV) vulnerabilities.
No parameter schema in public metadata yet.
vuln_kev_latestGet vulnerabilities recently added to CISA's Known Exploited Vulnerabilities catalog.
Get vulnerabilities recently added to CISA's Known Exploited Vulnerabilities catalog.
No parameter schema in public metadata yet.
vuln_kev_due_soonGet KEV entries with remediation deadlines approaching.
Get KEV entries with remediation deadlines approaching.
No parameter schema in public metadata yet.
vuln_epss_topGet CVEs most likely to be exploited in the next 30 days based on EPSS machine learning model.
Get CVEs most likely to be exploited in the next 30 days based on EPSS machine learning model.
No parameter schema in public metadata yet.
vuln_trendingGet recently published high/critical severity CVEs from the NVD.
Get recently published high/critical severity CVEs from the NVD.
No parameter schema in public metadata yet.
vuln_by_vendorSearch CVEs for a specific vendor/product and cross-reference with CISA KEV to flag actively exploited issues.
Search CVEs for a specific vendor/product and cross-reference with CISA KEV to flag actively exploited issues.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Cybersecurity Vulnerability Intelligence MCP Server
Unified vulnerability intelligence from 4 government data sources in a single MCP server. Get enriched CVE lookups with CVSS scores, active exploitation status, exploitation probability, and ATT&CK techniques in one call.
| Source | What It Provides | Update Frequency |
|---|---|---|
| NIST NVD 2.0 | CVE details, CVSS scores, descriptions, references, CWE classifications | Continuous |
| CISA KEV | Actively exploited vulnerabilities catalog, remediation deadlines | Daily |
| FIRST.org EPSS | Exploitation probability scores (0-1) predicting likelihood of exploitation in next 30 days | Daily |
| MITRE ATT&CK | Adversary techniques mapped to CVEs | Quarterly |
Tools
vuln_lookup_cve — Enriched CVE Lookup
The killer feature. Look up any CVE and get intelligence from all 4 sources in a single call.
- Input:
{ cveId: "CVE-2021-44228" } - Returns: NVD details + CVSS score + KEV exploitation status + EPSS probability + ATT&CK techniques
vuln_search — Search CVEs
Details
- Repository
- github.com/martc03/gov-mcp-servers
- Category
- Security & Pentesting
- Transport
- HTTP
- Registry
- MCP registry, active
Related Security & Pentesting MCP servers
View all
FedRAMP 20x Requirementskevinrabun/fedramp20xmcpAn MCP server that provides access to FedRAMP 20x security requirements and controls.5stars
Promptrejectormcprevsmoke/promptrejectormcpSecurity gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities.2stars
MCP Gateway Scanwillianpinho/mcp-gateway-scanRead-only MCP/agent-gateway readiness scanner — scores a repo across 7 security dimensions.2stars
Fetter MCPfetter-io/fetter-mcpReal-time Python package and vulnerability data for AI coding agents.1stars
Recon Kit Mcpnan786521/recon-mcpRead-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.1stars
mcp-armorstudiomeyer-io/mcp-armorSecurity sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.1stars