mcpbeat Sign in

Exploitwatch MCP Server

by vercel-exploitwatch-kappa Your server? Claim it
answering

Exploitwatch is answering right now. Last checked 4 min ago. It exposes 1 tools.

Check dependencies against CISA's real Known Exploited Vulnerabilities feed.

Uptime history 50 days of history · worst day 75%
50 days agonow
100.0%
Uptime 24h
92 of 92 checks
1
Tools
read from the server
244 ms
Response time
average over 24h
open, no key
Access
streamable-http

Exploitwatch does not always answer

Over the last week it answered 91.9% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 4 min ago.

run in your terminal
claude mcp add exploitwatch --transport http https://exploitwatch-kappa.vercel.app/api/mcp
Settings → Connectors → Add custom connector, then paste this address
https://exploitwatch-kappa.vercel.app/api/mcp
~/.codex/config.toml
[mcp_servers.exploitwatch]
url = "https://exploitwatch-kappa.vercel.app/api/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "exploitwatch": {
      "url": "https://exploitwatch-kappa.vercel.app/api/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "exploitwatch": {
      "type": "http",
      "url": "https://exploitwatch-kappa.vercel.app/api/mcp"
    }
  }
}

Available tools 1

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

kev
check_kev
Check a comma-separated list of software dependency/product names (e.g. 'lodash, openssl, apache struts') against CISA's real, public Known Exploited Vulnerabilities (KEV) catalog. Returns any current matches with the CVE ID, description, date added, and known ransomware use -- grounded in CISA's live feed, not a guess. Useful for triaging whether a project's dependencies include anything under active exploitation right now.

Endpoints

URLTransportStateLatencyChecked
https://exploitwatch-kappa.vercel.app/api/mcp streamable-http answering 202 ms 4 min ago

Alternatives to Exploitwatch

same job, measured the same way
Cisa Kev MCP
by mrfentmen

Use this MCP server to CISA Known Exploited Vulnerabilities catalog search. Tools include search...

115 installs/wk local only
TOPY.AI · AI CSO
by topy

Founders' AI CSO: vulnerabilities, dependencies, secrets, verified-site checks, threat model, fixes.

252 installs/wk answering
CISA Known Exploited Vulnerabilities (kevwatch)
by a2awire

CISA KEV catalog: active-exploit alerts, hourly. Register in-session — free testnet funds.

16 tools answering
Dependency Vulnerability Check (OSV)
by brunckel

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

answering
OSV Dependency Vulnerability Check
by fairquery

Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

answering
KEVWire
by kevwire

Exploited vulnerabilities, critical CVEs, breaches and AI security incidents, with primary sources.

5 tools answering
Depcheck
by kaneky

Known vulnerabilities for exact package versions from OSV, with fixes. Paid per call, x402.

1 tools answering
Vulnerability Exposure
by mrfrazer25

Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CISA KEV, EPSS)

1 342 installs/wk local only

Exploitwatch — questions

Answers built from our own checks of this server.

What can Exploitwatch do?
It exposes 1 tools, read directly from the server on our last check. Among them: check_kev. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is Exploitwatch working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 244 ms. The bar chart above shows every period we have measured.
How do I connect Exploitwatch?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Exploitwatch need an API key?
No. Exploitwatch completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 1 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Exploitwatch?
It answers our handshake in 244 ms on average, which is faster than 59% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.