Security Intel MCP Server

by datakoot Your server? Claim it

answering

Security Intel MCP is answering right now. Last checked 11 min ago. It exposes 5 tools. Last commit 24 Oct 2026.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Uptime history 91 days of history · worst day 93%

91 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

115 ms

Response time

average over 24h

Stars

last commit 24 Oct 2026

What changed 7

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 2 September 2026. No other catalogue keeps this.

3 Oct 2 tools changed the parameters they ask for audit_dependencies, cve_lookup

16 Sep 2 tools appeared epss_score, known_exploited

16 Sep a tool description was rewritten cve_lookup

16 Sep a tool changed version

2 Sep a tool changed the parameters it asks for package_vulnerabilities

Security Intel MCP missed one check this week

Everything else answered, so this is steady rather than shaky. We check every 15 minutes, which is how a one-off gets told apart from the start of a pattern, and how you hear about the next one within the hour instead of from your users.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add security-intel-mcp --transport http https://security.datakoot.com/mcp

Settings → Connectors → Add custom connector, then paste this address

https://security.datakoot.com/mcp

~/.codex/config.toml

[mcp_servers.security-intel-mcp]
url = "https://security.datakoot.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "security-intel-mcp": {
      "url": "https://security.datakoot.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "security-intel-mcp": {
      "type": "http",
      "url": "https://security.datakoot.com/mcp"
    }
  }
}

Available tools 5

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

audit

audit_dependencies

Audit a whole dependency manifest for known vulnerabilities in one call. Paste a package.json (as 'manifest'), or pass a 'dependencies' array of {name, version} objects. Returns per-package findings and a summary. Ecosystem defaults to npm.

cve

cve_lookup

Look up a CVE by ID and get a compact summary: description, CVSS score & severity, vector, CWE weakness, publish date, references — plus whether it is on the CISA Known-Exploited list (actively exploited in the wild) and its EPSS exploit-probability. Sources: NVD (NIST), CISA KEV, FIRST EPSS.

epss

epss_score

Get the EPSS exploit-probability score (0-1) and percentile for one or more CVEs — the likelihood each is exploited in the next 30 days. Use it to prioritize patching. Pass cve_id for one, or cve_ids (array or comma-separated) for many. Source: FIRST.org EPSS.

known

known_exploited

Check whether a CVE is on the CISA Known Exploited Vulnerabilities (KEV) catalog — confirmed exploited in the wild — or list the most recently added exploited vulnerabilities. Pass cve_id to check one; omit it to list recent (optionally filter by vendor/product, or ransomware_only). Source: CISA KEV, updated ~daily.

package

package_vulnerabilities

List known vulnerabilities for a software package (optionally a specific version) via OSV. Ecosystems: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex.

Endpoints

URL	Transport	State	Latency	Checked
https://security.datakoot.com/mcp	streamable-http	answering	78 ms	11 min ago

Alternatives to Security Intel MCP

same job, measured the same way

Security Intel MCP

by datakoot

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

5 tools answering

AgentGuard — security checks for AI agents

by shuaicongxiaomai

Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

local only

Osv Advisory MCP Server

by cyanheads

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

286 installs/wk 5 tools answering

Offense

by offense-research

Security tools for coding agents: dependency advisory audits and evidence for remediation.

1 tools answering

Siteaudit MCP

by vdalhambra

SEO, performance, and security audits for any URL — no API keys required

88 installs/wk local only

Janee

by rsdouglas

Secure secrets proxy for AI agents — manages API keys so agents never see raw credentials.

186 installs/wk local only

MCP Codeaudit

by infoinlet-marketplace

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

51 installs/wk local only

OSV Dependency Vulnerability Check

by fairquery

Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

answering

Security Intel MCP — questions

Answers built from our own checks of this server.

What can Security Intel MCP do?

It exposes 5 tools, read directly from the server on our last check. Among them: audit_dependencies, cve_lookup, epss_score, known_exploited, package_vulnerabilities. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Security Intel MCP working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 115 ms. The bar chart above shows every period we have measured.

How do I connect Security Intel MCP?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Security Intel MCP need an API key?

No. Security Intel MCP completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 5 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Security Intel MCP?

It answers our handshake in 115 ms on average, which is faster than 89% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Security Intel MCP open source?

The code is open source: it is published under the MIT licence, written in JavaScript and 0 stars on GitHub. The licence covers the code in the repository, not the hosted service at security.datakoot.com, which runs on its operator's own terms.