Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database
Server Details
Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)
Glama couldn't complete the latest health check. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Uptime
- 0.0% over 38 days
- Last Tested
- Transport
- Streamable HTTP
- URL
TDQS
Scored across 17 tools
Each tool has a clearly distinct purpose: audit_stack for stack scanning, check_health for API status, generate_finding for report generation, get_author/ get_cwe/ get_exploit_analysis/ get_exploit_code/ get_nuclei_templates/ get_platform_stats/ get_vulnerability for retrieving specific details, list_authors/ list_cwes/ list_products/ list_vendors for enumerations, lookup_alt_id for ID mapping, and search_exploits/ search_vulnerabilities for filtered searching. The descriptions precisely differentiate similar tools (e.g., search_exploits uses structured filters while search_vulnerabilities supports free-text).
All tool names follow a consistent verb_noun pattern with imperative verbs: audit, check, generate, get, list, lookup, search. The naming is uniform and predictable across the entire set, making it easy for an agent to infer tool functionality from the name alone.
Seventeen tools is an appropriate number for a vulnerability intelligence platform. The count covers essential operations (health check, statistics, vulnerability/ exploit details, searches, listings) without being overwhelming or too sparse. Each tool addresses a specific need in the domain.
The tool surface comprehensively covers the vulnerability intelligence domain: searching and retrieving vulnerabilities and exploits, analyzing exploits (AI analysis, code retrieval), accessing supporting data (CWE, vendors, products, authors), performing stack audits, generating report findings, and checking API health. There are no obvious gaps for a read-only query platform, and it includes useful extras like Nuclei templates and alternate ID lookup.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- Changed
search_exploits1 field changed- changed
Input schema / properties / source / enumPrevious value: -[ - "exploitdb", - "github", - "gitlab", - "inthewild", - "metasploit", - "nomisec", - "patchapalooza", - "vulncheck_xdb", - "writeup" -]New value: +[ + "exploitdb", + "github", + "gitlab", + "inthewild", + "metasploit", + "nomisec", + "oscs", + "patchapalooza", + "poc_monitor", + "vulncheck_xdb", + "writeup" +]
6 tool updates
- Changed
generate_finding1 field changed- changed
Input schema / properties / cve_id / patternPrevious value: -"^(?:CVE|EIP)-\\d{4}-\\d{4,7}$"New value: +"^(?:[Cc][Vv][Ee]|[Ee][Ii][Pp])[-\\u2010\\u2011\\u2013\\u2014]\\d{4}[-\\u2010\\u2011\\u2013\\u2014]\\d{4,7}$"
- Changed
get_cwe1 field changed- changed
Input schema / properties / cwe_id / patternPrevious value: -"^(?:CWE-)?\\d{1,9}$"New value: +"^(?:[Cc][Ww][Ee]-)?\\d{1,9}$"
- Changed
get_nuclei_templates1 field changed- changed
Input schema / properties / cve_id / patternPrevious value: -"^(?:CVE|EIP)-\\d{4}-\\d{4,7}$"New value: +"^(?:[Cc][Vv][Ee]|[Ee][Ii][Pp])[-\\u2010\\u2011\\u2013\\u2014]\\d{4}[-\\u2010\\u2011\\u2013\\u2014]\\d{4,7}$"
- Changed
get_vulnerability1 field changed- changed
Input schema / properties / cve_id / patternPrevious value: -"^(?:CVE|EIP)-\\d{4}-\\d{4,7}$"New value: +"^(?:[Cc][Vv][Ee]|[Ee][Ii][Pp])[-\\u2010\\u2011\\u2013\\u2014]\\d{4}[-\\u2010\\u2011\\u2013\\u2014]\\d{4,7}$"
- Changed
search_exploits1 field changed- changed
Input schema / properties / cve / patternPrevious value: -"^CVE-\\d{4}-\\d{4,7}$"New value: +"^[Cc][Vv][Ee][-\\u2010\\u2011\\u2013\\u2014]\\d{4}[-\\u2010\\u2011\\u2013\\u2014]\\d{4,7}$"
- Changed
search_vulnerabilities1 field changed- changed
Input schema / properties / cwe / patternPrevious value: -"^(?:CWE-)?\\d{1,9}$"New value: +"^(?:[Cc][Ww][Ee]-)?\\d{1,9}$"
13 tool updates
- Changed
audit_stack2 fields changed- added
Input schema / properties / technologies / maxLengthAdded value: +300 - added
Input schema / properties / technologies / minLengthAdded value: +1
- Changed
generate_finding4 fields changed- added
Input schema / properties / cve_id / maxLengthAdded value: +20 - added
Input schema / properties / cve_id / patternAdded value: +"^(?:CVE|EIP)-\\d{4}-\\d{4,7}$" - added
Input schema / properties / notes / maxLengthAdded value: +200 - added
Input schema / properties / target / maxLengthAdded value: +200
- Changed
get_author2 fields changed- added
Input schema / properties / author_name / maxLengthAdded value: +200 - added
Input schema / properties / author_name / minLengthAdded value: +1
- Changed
get_cwe2 fields changed- added
Input schema / properties / cwe_id / maxLengthAdded value: +12 - added
Input schema / properties / cwe_id / patternAdded value: +"^(?:CWE-)?\\d{1,9}$"
- Changed
get_exploit_analysis2 fields changed- added
Input schema / properties / exploit_id / maximumAdded value: +2147483648 - added
Input schema / properties / exploit_id / minimumAdded value: +1
- Changed
get_exploit_code3 fields changed- added
Input schema / properties / exploit_id / maximumAdded value: +2147483648 - added
Input schema / properties / exploit_id / minimumAdded value: +1 - added
Input schema / properties / file_path / maxLengthAdded value: +500
- Changed
get_nuclei_templates2 fields changed- added
Input schema / properties / cve_id / maxLengthAdded value: +20 - added
Input schema / properties / cve_id / patternAdded value: +"^(?:CVE|EIP)-\\d{4}-\\d{4,7}$"
- Changed
get_vulnerability2 fields changed- added
Input schema / properties / cve_id / maxLengthAdded value: +20 - added
Input schema / properties / cve_id / patternAdded value: +"^(?:CVE|EIP)-\\d{4}-\\d{4,7}$"
- Changed
list_authors5 fields changed- added
Input schema / properties / page / defaultAdded value: +1 - added
Input schema / properties / page / minimumAdded value: +1 - added
Input schema / properties / per_page / defaultAdded value: +25 - added
Input schema / properties / per_page / maximumAdded value: +50 - added
Input schema / properties / per_page / minimumAdded value: +1
- Changed
list_products2 fields changed- added
Input schema / properties / vendor / maxLengthAdded value: +100 - added
Input schema / properties / vendor / minLengthAdded value: +1
- Changed
lookup_alt_id2 fields changed- added
Input schema / properties / alt_id / maxLengthAdded value: +100 - added
Input schema / properties / alt_id / minLengthAdded value: +1
- Changed
search_exploits22 fields changed- changed
Input schema / properties / attack_type / descriptionPrevious value: -"Filter by attack type from AI analysis: RCE, SQLi, XSS, DoS, LPE, auth_bypass, info_leak, deserialization, other"New value: +"Filter by attack type from AI analysis (case-insensitive on input; canonical casing returned)" - added
Input schema / properties / attack_type / enumAdded value: +[ + "RCE", + "SQLi", + "XSS", + "DoS", + "LPE", + "auth_bypass", + "info_leak", + "deserialization", + "other" +] - added
Input schema / properties / author / maxLengthAdded value: +200 - changed
Input schema / properties / complexity / descriptionPrevious value: -"Filter by exploit complexity: trivial, simple, moderate, complex"New value: +"Filter by exploit complexity" - added
Input schema / properties / complexity / enumAdded value: +[ + "complex", + "moderate", + "simple", + "trivial" +] - added
Input schema / properties / cve / maxLengthAdded value: +20 - added
Input schema / properties / cve / patternAdded value: +"^CVE-\\d{4}-\\d{4,7}$" - added
Input schema / properties / language / maxLengthAdded value: +40 - changed
Input schema / properties / llm_classification / descriptionPrevious value: -"Filter by LLM classification: working_poc, trojan, suspicious, scanner, stub, writeup, tool, no_code"New value: +"Filter by LLM classification" - added
Input schema / properties / llm_classification / enumAdded value: +[ + "no_code", + "scanner", + "stub", + "suspicious", + "tool", + "trojan", + "working_poc", + "writeup" +] - added
Input schema / properties / min_stars / minimumAdded value: +0 - added
Input schema / properties / page / defaultAdded value: +1 - added
Input schema / properties / page / minimumAdded value: +1 - added
Input schema / properties / per_page / defaultAdded value: +10 - added
Input schema / properties / per_page / maximumAdded value: +25 - added
Input schema / properties / per_page / minimumAdded value: +1 - added
Input schema / properties / product / maxLengthAdded value: +100 - changed
Input schema / properties / reliability / descriptionPrevious value: -"Filter by exploit reliability: reliable, unreliable, untested, theoretical"New value: +"Filter by exploit reliability" - added
Input schema / properties / reliability / enumAdded value: +[ + "reliable", + "theoretical", + "unreliable", + "untested" +] - changed
Input schema / properties / source / descriptionPrevious value: -"Filter by source: github, metasploit, exploitdb, nomisec, writeup, gitlab, inthewild, vulncheck_xdb"New value: +"Filter by source" - added
Input schema / properties / source / enumAdded value: +[ + "exploitdb", + "github", + "gitlab", + "inthewild", + "metasploit", + "nomisec", + "patchapalooza", + "vulncheck_xdb", + "writeup" +] - added
Input schema / properties / vendor / maxLengthAdded value: +100
- Changed
search_vulnerabilities20 fields changed- added
Input schema / properties / cwe / maxLengthAdded value: +12 - added
Input schema / properties / cwe / patternAdded value: +"^(?:CWE-)?\\d{1,9}$" - added
Input schema / properties / date_from / patternAdded value: +"^\\d{4}-\\d{2}-\\d{2}$" - added
Input schema / properties / date_to / patternAdded value: +"^\\d{4}-\\d{2}-\\d{2}$" - added
Input schema / properties / min_cvss / maximumAdded value: +10 - added
Input schema / properties / min_cvss / minimumAdded value: +0 - added
Input schema / properties / min_epss / maximumAdded value: +1 - added
Input schema / properties / min_epss / minimumAdded value: +0 - added
Input schema / properties / min_score / maximumAdded value: +10 - added
Input schema / properties / min_score / minimumAdded value: +0 - added
Input schema / properties / page / defaultAdded value: +1 - added
Input schema / properties / page / minimumAdded value: +1 - added
Input schema / properties / per_page / defaultAdded value: +10 - added
Input schema / properties / per_page / maximumAdded value: +25 - added
Input schema / properties / per_page / minimumAdded value: +1 - added
Input schema / properties / product / maxLengthAdded value: +100 - added
Input schema / properties / query / maxLengthAdded value: +200 - added
Input schema / properties / vendor / maxLengthAdded value: +100 - added
Input schema / properties / year / maximumAdded value: +2030 - added
Input schema / properties / year / minimumAdded value: +1999
1 tool update
- Changed
search_vulnerabilities4 fields changed- changed
Input schema / properties / min_cvss / descriptionPrevious value: -"Minimum CVSS score (0-10)"New value: +"Minimum CVSS v3 score (0-10)" - added
Input schema / properties / min_scoreAdded value: +{ + "description": "Minimum score for the selected score_version (0-10)", + "type": "number" +} - added
Input schema / properties / score_versionAdded value: +{ + "description": "Score family for min_score / score_desc", + "enum": [ + "v3", + "v4", + "effective" + ], + "type": "string" +} - changed
Input schema / properties / sort / enumPrevious value: -[ - "newest", - "published_newest", - "oldest", - "published_oldest", - "cvss_desc", - "epss_desc", - "relevance", - "signal_newest", - "exploit_newest", - "nuclei_newest" -]New value: +[ + "newest", + "published_newest", + "oldest", + "published_oldest", + "cvss_desc", + "score_desc", + "epss_desc", + "relevance", + "signal_newest", + "exploit_newest", + "nuclei_newest" +]
1 tool update
- Changed
search_vulnerabilities2 fields changed- changed
Input schema / properties / sort / descriptionPrevious value: -"Sort order (default: newest)"New value: +"Sort order. Aliases are normalized to the current server schema." - changed
Input schema / properties / sort / enumPrevious value: -[ - "newest", - "oldest", - "cvss_desc", - "epss_desc", - "relevance" -]New value: +[ + "newest", + "published_newest", + "oldest", + "published_oldest", + "cvss_desc", + "epss_desc", + "relevance", + "signal_newest", + "exploit_newest", + "nuclei_newest" +]
2 tool updates
- Changed
get_exploit_code2 fields changed- changed
Input schema / properties / file_path / descriptionPrevious value: -"Specific file path to view (optional — auto-selects if omitted)"New value: +"Relative path inside the exploit archive (optional — auto-selects if omitted). Absolute paths and traversal patterns are rejected." - added
Input schema / properties / file_path / patternAdded value: +"^(?![\\\\/])(?![A-Za-z]:[\\\\/])(?!.*\\.\\.)(?!.*~).{1,500}$"
- Changed
search_exploits3 fields changed- changed
Input schema / properties / llm_classification / descriptionPrevious value: -"Filter by LLM classification: working_poc, trojan, suspicious, scanner, stub, writeup, tool"New value: +"Filter by LLM classification: working_poc, trojan, suspicious, scanner, stub, writeup, tool, no_code" - changed
Input schema / properties / reliability / descriptionPrevious value: -"Filter by exploit reliability: reliable, unreliable, untested"New value: +"Filter by exploit reliability: reliable, unreliable, untested, theoretical" - changed
Input schema / properties / source / descriptionPrevious value: -"Filter by source: github (direct GitHub crawl, ~400), metasploit (~3,900 modules), exploitdb (~52K), nomisec (GitHub PoCs via nomi-sec, ~19K — most GitHub exploits are here), writeup (reference writeups)"New value: +"Filter by source: github, metasploit, exploitdb, nomisec, writeup, gitlab, inthewild, vulncheck_xdb"
1 tool update
- Added
get_exploit_analysis
1 tool update
- Changed
search_vulnerabilities2 fields changed- added
Input schema / properties / any_exploitedAdded value: +{ + "description": "Only return CVEs exploited in the wild (CISA KEV + VulnCheck KEV + InTheWild.io)", + "type": "boolean" +} - added
Input schema / properties / ransomwareAdded value: +{ + "description": "Only return CVEs with confirmed ransomware campaign use", + "type": "boolean" +}
16 tool updates
- First observed
audit_stack - First observed
check_health - First observed
generate_finding - First observed
get_author - First observed
get_cwe - First observed
get_exploit_code - First observed
get_nuclei_templates - First observed
get_platform_stats - First observed
get_vulnerability - First observed
list_authors - First observed
list_cwes - First observed
list_products - First observed
list_vendors - First observed
lookup_alt_id - First observed
search_exploits - First observed
search_vulnerabilities
Related MCP Connectors
Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.
Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
CVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Related MCP Servers
- AlicenseAqualityBmaintenanceEnables LLMs to access realtime CVE intelligence aggregated from NVD, CISA KEV, EPSS, GitHub advisories, PoC discovery, and Metasploit/Nuclei tooling, providing vulnerability details, exploitation signals, and prioritized triage verdicts.12MIT
- AlicenseAqualityBmaintenanceEnables AI agents to search, correlate, and monitor real-time vulnerability intelligence from NVD, CISA KEV, EPSS, and MITRE ATT&CK, including CVE details, critical CVE tracking, known exploited vulnerabilities, and exploitation probability scores.52MIT
- AlicenseNot gradedqualityCmaintenanceProvides real-time vulnerability intelligence including CVE lookup, EPSS exploit probability, and CISA KEV status from free APIs, enabling AI assistants to prioritize CVEs by real-world risk.MIT
- AlicenseNot gradedqualityFmaintenanceProvides CVE search enriched with EPSS exploit likelihood and CISA KEV status, plus live IP/domain reputation and a real-time threat feed for AI agents.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.