Cisa Kev MCP runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 9 Aug 2026.
Use this MCP server to CISA Known Exploited Vulnerabilities catalog search. Tools include search...
Today is the operative word: we check Cisa Kev MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add cisa-kev-mcp -- npx -y cisa-kev-mcp
{
"mcpServers": {
"cisa-kev-mcp": {
"args": [
"-y",
"cisa-kev-mcp"
],
"command": "npx"
}
}
}
[mcp_servers.cisa-kev-mcp]
command = "npx"
args = ["-y", "cisa-kev-mcp"]
{
"mcpServers": {
"cisa-kev-mcp": {
"args": [
"-y",
"cisa-kev-mcp"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"cisa-kev-mcp": {
"args": [
"-y",
"cisa-kev-mcp"
],
"command": "npx"
}
}
}
CISA Known Exploited Vulnerabilities catalog
CISA KEV catalog: active-exploit alerts, hourly. Register in-session — free testnet funds.
CISA Known Exploited Vulnerabilities feed + remediation deadlines for US federal + critical infr...
Check dependencies against CISA's real Known Exploited Vulnerabilities feed.
Use this MCP server to OSV open source vulnerability data and package security checks. Tools...
CVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.
MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.
Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs
Answers built from our own checks of this server.