io.echelongraph/echelongraph-mcp

up checked 2026-11-11T08:37:28.942Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

EchelonGraph CVE & Exposure

Publisher-provided description

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

Summary by lookupd

Looks up CVE records, KEV and EPSS data, vendor advisories, and checks dependency lists for known vulnerabilities.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http echelongraph https://mcp.echelongraph.io/mcp

Claude Code, npm package (stdio)

claude mcp add echelongraph -- npx -y echelongraph-mcp

Codex, remote (streamable-http)

codex mcp add echelongraph --url https://mcp.echelongraph.io/mcp

Codex, npm package (stdio)

codex mcp add echelongraph -- npx -y echelongraph-mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "echelongraph": {
      "url": "https://mcp.echelongraph.io/mcp"
    }
  }
}

Cursor, npm package (stdio) → .cursor/mcp.json

{
  "mcpServers": {
    "echelongraph": {
      "command": "npx",
      "args": [
        "-y",
        "echelongraph-mcp"
      ]
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (16 tools)

Publisher-provided text

• cve_summary Summary of EchelonGraph's CVE Pulse feed: summary.total active CVEs, their counts by severity band (summary.critical, summary.high, summary.medium, summary.low)
• search_cves Search/list CVEs from EchelonGraph's CVE feed (NVD + MITRE-CNA pre-NVD + CISA-KEV + EPSS + GitHub GHSA, each polled on a schedule). Filter by severity, minimum
• get_cve One CVE's record: description, severity, cvss_v3_score, cvss_v4_score and cvss_v4_severity, echelongraph_score, echelongraph_severity and score_confidence, epss
• cve_exposure Internet-exposure footprint for one CVE from EchelonGraph's KEV-exposure radar: how many internet-facing services (distinct ip:port, returned as exposed_hosts;
• exposure_radar Aggregate totals from EchelonGraph's internet-exposure radars: kev_exposure, internet-facing services running actively-exploited (CISA-KEV) CVEs, plus the ranso
• kev_recent The CVEs CISA has added to its Known Exploited Vulnerabilities (KEV) catalog, newest first, from EchelonGraph's copy of that catalog, which polls CISA's feed ev
• epss_history How one CVE's EPSS score (FIRST's exploit-prediction probability, 0 to 1, with its percentile) has changed, as EchelonGraph recorded it: points, oldest first, e
• check_affected Whether a product or package at a given version is affected by known CVEs, from the same matcher as echelongraph.io/am-i-affected. The CPE path takes product (a
• check_sbom Check a dependency list against EchelonGraph's advisory corpus, one verdict per component. For container images and Kubernetes pods, the input is an SBOM of eac
• scan_manifest Check a project's lockfile or pinned manifest against EchelonGraph's advisory corpus, one verdict per dependency. Pass files: 1 to 20 of filename and content, u
• cve_intel Weakness, exploit code, detection checks, affected packages and fixed versions for one CVE, from EchelonGraph's per-CVE enrichment. Returns cwes (each cwe_id wi
• cve_remediation How one CVE is fixed, as its sources state it, in one answer. Every text is relayed as stated by its source; EchelonGraph has not tested it. An empty list or a
• get_cwe One CWE (weakness class) and the CVEs classified under it. Returns cwe_id, name and description (from the MITRE CWE catalog EchelonGraph embeds, version catalog
• vendor_advisories_for_cve The vendor-published advisories that name one CVE, newest first, at most 20: for each, vendor, vendor_advisory_id, title, severity and cvss_v3_score where given
• get_vendor_advisory One vendor advisory in full, by vendor and advisory ID (the vendor and vendor_advisory_id of a vendor advisory row, never its advisory_id): title, description,
• search_vendor_advisories Search or list vendor-published advisories, newest first. A query of 3 or more characters is matched case-insensitively as a substring of each advisory's title,

Changes

Newest first, as lookupd saw them

• 2026-11-11: version 3.2.2 → 3.2.3

Details

• Version: 3.2.3
• Transports: streamable-http, stdio
• Uptime (7 days): 100%
• Median latency: 1118 ms
• First indexed: 2026-11-01T09:03:01.943Z
• Last seen in registry: 2026-11-11T17:17:17.892Z
• Repository: https://github.com/echelongraph/echelongraph-mcp
• Website: https://echelongraph.io/pulse/mcp

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/io.echelongraph/echelongraph-mcp.svg)](https://lookupd.com/servers/io.echelongraph/echelongraph-mcp)

• 62141 servers
• Last crawl: 2026-11-11T18:39:04.612Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp