com.vulntel/mcp

up checked 2026-11-11T12:37:31.930Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

vulntel

Publisher-provided description

Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports

Summary by lookupd

Looks up CVE intel, KEV and EPSS data, attack approaches from disclosed reports, and checks public code for vulnerable copies.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http mcp https://mcp.vulntel.com/mcp

Codex, remote (streamable-http)

codex mcp add mcp --url https://mcp.vulntel.com/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.vulntel.com/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (13 tools)

Publisher-provided text

enrich_cve Full intelligence for a single CVE: CVSS, KEV status, EPSS, CISA SSVC (exploitation/automatable/technical_impact), P1-P4 priority with rationale, affected produ
check_technology Find vulnerabilities affecting a product across NVD (CPE) and OSV (package ecosystems), de-duplicated and ranked by priority/EPSS/CVSS. Distinct products that
hunt_plan Turn a recon'd stack into a ranked dig-order for authorized bug-hunting. For each discovered component, returns its top high-risk CVEs (KEV / CISA-SSVC- active
observe Scan a host's exposed stack and join it to the CVE corpus — the recon workhorse. Fingerprints the homepage + JS bundles (recovering the backend identity and API
search_vulns Search the CVE corpus — one entry point, three retrieval modes picked from your arguments: - query= a concept / technique / weakness (e.g. "SSO SAML asserti
find_attack_approaches Find how bugs *like this* were actually FOUND — retrieve real disclosed bug-bounty report mechanic-cards whose approach is closest (by mechanism) to your query
find_continuations When you're STUCK mid-hunt: describe your POSITION — the attacker state/capabilities you hold, stripped of product names — and get the CONTINUATIONS that worked
assist_submission Submission & escalation co-pilot for a bug-bounty finding. Paste your DRAFT finding (and what you already tried / couldn't achieve) and get a grounded brief bui
program_outcome_prior At the START of an engagement on a bug-bounty PROGRAM, get a grounded prior over what bug classes have historically LANDED there — to decide what to look at fir
new_in_scope Find FRESH attack surface: bounty-eligible assets that entered a public bug-bounty program's scope in the last `days` (HackerOne, Bugcrowd, Intigriti, YesWeHack
verify_cve_claim Fact-check a claim about a CVE against the corpus — catch hallucinations before they ship. Verifies: does the CVE exist; does it affect the claimed product at t
corpus_stats Corpus size and data freshness (CVE / KEV / EPSS counts and latest timestamps).
search_public_code Search public repositories for an exact code string; return WHERE it appears. Use it to hunt vendored / copy-pasted copies of known-vulnerable code: search a d

Details

Version: 1.2.0
Transports: streamable-http
Uptime (7 days): 100%
Median latency: 546 ms
First indexed: 2026-11-03T04:17:20.595Z
Last seen in registry: 2026-11-03T12:17:22.370Z
Repository: https://github.com/rozetyp/vulntel-mcp
Website: https://vulntel.com

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/com.vulntel/mcp.svg)](https://lookupd.com/servers/com.vulntel/mcp)

62071 servers
Last crawl: 2026-11-11T16:39:06.253Z
API base: https://api.lookupd.com
MCP URL: https://api.lookupd.com/mcp