com.cve-security/cve-intelligence

up checked 2026-11-11T05:38:20.043Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided description

CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.

Summary by lookupd

Lets an agent look up CVE exploitation data, detection coverage, fixed versions, chained exploits, and package vulnerabilities.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http cve-intelligence https://cve-security.com/api/mcp

Codex, remote (streamable-http)

codex mcp add cve-intelligence --url https://cve-security.com/api/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "cve-intelligence": {
      "url": "https://cve-security.com/api/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (9 tools)

Publisher-provided text

• get_cve Full intelligence record for one CVE: per-scorer CVSS, EPSS, CISA KEV/ransomware/SSVC, four remote-detection modalities (the checks that work over the network)
• search_cves Search the catalog. Free text (q) and/or structured filters: vendor (slug), cwe (CWE-nnn), technique (ATT&CK id, such as T1190), year ("2024,2025"), sev ("criti
• query_package CVEs affecting one open-source package, by purl (pkg:npm/lodash) or ecosystem + name (Maven names are group:artifact). Returns the CVE list KEV-first with each
• get_updates The publication change stream: what this site published, stamped with OUR publish time (first_published, kev_added, detection_added, remediation_added, first_si
• get_scoreboard The Defender Scoreboard report (CC BY 4.0): exploited vs detectable vs patchable, every figure with its method, caveat and denominator, plus the corpus block an
• get_sightings Field sightings: CVEs a named sensor network recorded in the last 7 or 30 days, most sighting days first. A field sighting is a day on which Shadowserver honeyp
• get_chains Known Chained Vulnerabilities™: pairs of CVEs that a cited source reports were used together in one exploit chain (VulnCheck KEV entry text, Metasploit modules,
• get_epss_movers CVEs whose EPSS exploitation probability rose the most recently. window is "7d" (default) or "30d". Each rise is measured between same-EPSS-model-version scores
• table1_read BOD 26-04 Table 1 read for up to 50 CVEs at a stated asset exposure. Per CVE this dataset supplies CISA KEV status and due date, CISA's SSVC Automatable and Tec

Details

• Version: 1.7.0
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 225 ms
• First indexed: 2026-11-01T08:53:35.157Z
• Last seen in registry: 2026-11-01T08:53:35.177Z
• Website: https://cve-security.com

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/com.cve-security/cve-intelligence.svg)](https://lookupd.com/servers/com.cve-security/cve-intelligence)

• 62033 servers
• Last crawl: 2026-11-11T15:38:39.561Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp