Security Intel MCP Server

by datakoot Your server? Claim it

answering

Security Intel MCP is answering right now. Last checked 2 min ago. It exposes 3 tools. Last commit 7 Sep 2026.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Uptime history 8 days of history

8 days agonow

100.0%

Uptime 24h

93 of 93 checks

Tools

read from the server

84 ms

Response time

average over 24h

Stars

last commit 7 Sep 2026

Nothing serious here today

Today is the operative word: we check Security Intel MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add cve-vulnerability-lookup --transport http https://security.datakoot.com/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "cve-vulnerability-lookup": {
      "url": "https://security.datakoot.com/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.cve-vulnerability-lookup]
url = "https://security.datakoot.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "cve-vulnerability-lookup": {
      "url": "https://security.datakoot.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "cve-vulnerability-lookup": {
      "url": "https://security.datakoot.com/mcp"
    }
  }
}

Available tools 3

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

audit

audit_dependencies

Audit a whole dependency manifest for known vulnerabilities in one call. Paste a package.json (as 'manifest'), or pass a 'dependencies' array of {name, version} objects. Returns per-package findings and a summary. Ecosystem defaults to npm.

cve

cve_lookup

Look up a CVE by ID and get a compact summary: description, CVSS score & severity, vector, CWE weakness, publish date, and references. Source: NVD (NIST).

package

package_vulnerabilities

List known vulnerabilities for a software package (optionally a specific version) via OSV. Ecosystems: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex.

Endpoints

URL	Transport	State	Latency	Checked
https://security.datakoot.com/mcp	streamable-http	answering	59 ms	2 min ago

Alternatives to Security Intel MCP

same job, measured the same way

Security Intel MCP

by datakoot

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

3 tools answering

AgentGuard — security checks for AI agents

by shuaicongxiaomai

Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

local only

Npmjs MCP

by yawlabs

npm registry MCP server — package intelligence, security audits, dependency analysis

123 installs/wk local only

mcp-toolbelt

by papacasper

29 pay-per-call DNS, SEO, SSL, security, and dev tools for AI agents. x402, no API key.

29 tools answering

Siteaudit MCP

by vdalhambra

SEO, performance, and security audits for any URL — no API keys required

75 installs/wk local only

MCPLookup

by mcplookup

Look up independent trust ratings and security, maintenance, and adoption evidence for MCP servers.

63 installs/wk 3 tools answering

MCP Codeaudit

by infoinlet-marketplace

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

23 installs/wk local only

Defenter Proxy

by defenter-ai

Real-time semantic security for AI coding agents and MCP tools

122 installs/wk local only

Security Intel MCP — questions

Answers built from our own checks of this server.

What can Security Intel MCP do?

It exposes 3 tools, read directly from the server on our last check. Among them: audit_dependencies, cve_lookup, package_vulnerabilities. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Security Intel MCP working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 93 of 93 checks got a reply (100.0%), average response time 84 ms. The bar chart above shows every period we have measured.

How do I connect Security Intel MCP?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Security Intel MCP need an API key?

No. Security Intel MCP completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 3 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Security Intel MCP?

It answers our handshake in 84 ms on average, which is faster than 87% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Security Intel MCP open source?

Yes — it is published under the MIT licence, written in JavaScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.