mcpbeat Sign in

UK Data: CVEs and package popularity MCP Server

by co-reliness Your server? Claim it
answering

UK Data: CVEs and package popularity is answering right now. Last checked 8 min ago. It exposes 4 tools.

Software vulnerabilities (CVEs) from the US NVD and package downloads for npm, PyPI and crates

Uptime history 21 hours of history
21 hours agonow
100.0%
Uptime 24h
75 of 75 checks
4
Tools
read from the server
224 ms
Response time
average over 24h
open, no key
Access
streamable-http

Nothing serious here today

Today is the operative word: we check UK Data: CVEs and package popularity every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 8 min ago.

run in your terminal
claude mcp add dev-security --transport http https://ukdata.reliness.co.uk/mcp/dev-security
Settings → Connectors → Add custom connector, then paste this address
https://ukdata.reliness.co.uk/mcp/dev-security
~/.codex/config.toml
[mcp_servers.dev-security]
url = "https://ukdata.reliness.co.uk/mcp/dev-security"
.cursor/mcp.json
{
  "mcpServers": {
    "dev-security": {
      "url": "https://ukdata.reliness.co.uk/mcp/dev-security"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "dev-security": {
      "type": "http",
      "url": "https://ukdata.reliness.co.uk/mcp/dev-security"
    }
  }
}

Available tools 4

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

crate
crate_stats
Get download statistics and metadata for a Rust crate from crates.io. Returns total and recent download counts along with the latest version number. (cost: 1 credit)
cve
cve_lookup
Details of one specific CVE by its ID (e.g., CVE-2021-44228). Returns the vulnerability description, CVSS score, severity, published/modified dates, weakness type (CWE), and reference links for fixes or advisories from the NIST National Vulnerability Database. (cost: 1 credit)
npm
npm_stats
Get download statistics for a JavaScript package on the npm registry. Returns the total download count for the last week to gauge popularity and usage trends. (cost: 1 credit)
pypi
pypi_stats
Get download statistics for a Python package from PyPI. Returns recent download counts for the last day, week, and month to measure library adoption. (cost: 1 credit)

Endpoints

URLTransportStateLatencyChecked
https://ukdata.reliness.co.uk/mcp/dev-security streamable-http answering 85 ms 8 min ago

Alternatives to UK Data: CVEs and package popularity

same job, measured the same way
UK Data: Software packages and vulnerabilities
by co-reliness

Package versions, licences and known vulnerabilities for npm, PyPI, crates, Go, Maven, NuGet

2 tools answering
npm Plus
by ofershap

npm MCP — search packages, bundle sizes, vulnerabilities, compare downloads.

53 installs/wk local only
DepScout
by yc-droid

Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.

4 tools answering
Dependency Vulnerability Check (OSV)
by brunckel

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

answering
Package Health Check
by openkrill

Check an npm or Python package, or a package.json, for vulnerabilities and upkeep.

6 tools answering
Vulnerability Exposure
by mrfrazer25

Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CISA KEV, EPSS)

1 046 installs/wk local only
AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)
by agentdiet

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.

2 tools answering
Fetter MCP
by fetter-io

Real-time Python package and vulnerability data for AI coding agents.

3 tools answering

UK Data: CVEs and package popularity — questions

Answers built from our own checks of this server.

What can UK Data: CVEs and package popularity do?
It exposes 4 tools, read directly from the server on our last check. Among them: crate_stats, cve_lookup, npm_stats, pypi_stats. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is UK Data: CVEs and package popularity working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 75 of 75 checks got a reply (100.0%), average response time 224 ms. The bar chart above shows every period we have measured.
How do I connect UK Data: CVEs and package popularity?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does UK Data: CVEs and package popularity need an API key?
No. UK Data: CVEs and package popularity completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 4 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is UK Data: CVEs and package popularity?
It answers our handshake in 224 ms on average, which is faster than 65% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.