mcpbeat Sign in

Cisa Kev MCP Server

local only

Cisa Kev MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 97 installs a week from npm.

Use this MCP server to CISA Known Exploited Vulnerabilities catalog search. Tools include search...

The linked repository no longer exists on GitHub — it was deleted or made private.

Installs per day peak 270 · avg 23 · -73% w/w
a month agotoday
97
Installs / week
npm · cisa-kev-mcp
—
Stars
on GitHub
—
Last commit
3 releases in 90 days
—
License
language unknown

This one has been quiet for a while

Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add cisa-kev-mcp -- npx -y cisa-kev-mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "cisa-kev-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "cisa-kev-mcp"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.cisa-kev-mcp]
command = "npx"
args = ["-y", "cisa-kev-mcp"]
.cursor/mcp.json
{
  "mcpServers": {
    "cisa-kev-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "cisa-kev-mcp"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "cisa-kev-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "cisa-kev-mcp"
      ]
    }
  }
}

Alternatives to Cisa Kev MCP

same job, measured the same way
U
US CISA Known Exploited Vulnerabilities (KEV) & Ransomware Audit
by ceadigital

US CISA Known Exploited Vulnerabilities (KEV) catalog & active ransomware campaign check.

28 tools answering
CISA Known Exploited Vulnerabilities (kevwatch)
by a2awire

CISA KEV catalog: active-exploit alerts, hourly. Register in-session — free testnet funds.

17 tools answering
Exploitwatch
by vercel-exploitwatch-kappa

Check dependencies against CISA's real Known Exploited Vulnerabilities feed.

1 tools answering
Osv MCP
by mrfentmen

Use this MCP server to OSV open source vulnerability data and package security checks. Tools...

68 installs/wk local only
NotCVE — CVE & Vulnerability Intelligence
by notcve

CVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.

answering
Base Security Scanner MCP
by lordbasilaiassistant-sudo

MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.

82 installs/wk local only
Codesearch
by sk-dev-ai

Code, package, docs, paper and vulnerability search. 17 tools, keyless lanes.

146 installs/wk local only
Vanta
by mindstone

Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs

58 installs/wk local only

Cisa Kev MCP — questions

Answers built from our own checks of this server.

Why is there no uptime for Cisa Kev MCP?
Cisa Kev MCP runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package cisa-kev-mcp was installed 97 times last week.
Is Cisa Kev MCP still maintained?
The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.
How do I connect Cisa Kev MCP?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls cisa-kev-mcp straight from npm; nothing to host, nothing to sign up for.
How many people use Cisa Kev MCP?
The npm package cisa-kev-mcp was installed 97 times in the last week. Week over week that is -73%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.