Known security incidents in developer software, with reviewed fix procedures.
Scored across 5 tools
The tools separate cleanly into discovery (latest_incidents), vulnerability lookup (check_software), inventory assessment (check_inventory), consolidated remediation (get_digest), and per-incident remediation (get_fix_prompt). Although check_inventory and check_software both concern software, their scopes are clearly different: installed inventory comparison versus product/CVE lookup.
Most names follow a readable verb_noun pattern: check_inventory, check_software, get_digest, get_fix_prompt. latest_incidents is a noun phrase rather than a verb-led name, which is a minor deviation but still clear.
Five tools are well scoped for a focused vulnerability and fix-guidance server. Each tool covers a distinct stage of the workflow without obvious redundancy.
The surface covers incident discovery, software/CVE lookup, inventory checking, consolidated digests, and per-incident fix procedures. A direct incident-details lookup by incident id is not explicitly present, which is a minor gap, but most workflows can be completed using the existing tools.
Compares installed programs and versions (at most 50 items, version optional) with verified fixed versions. Each item is affected (below a verified fixed version, with the incident id), not_affected (at or above it) or unknown (no version, an unparsable version, or no verified fixed version for that program and version line).
Inputs: items (required), os.
Known security issues of one program, app or package (for example Chrome, Node.js, VS Code) or of a CVE id. Returns the matching products with incident id, title, severity, whether it is exploited in the wild, publication date, the verified fixed version and whether a fix procedure exists. The optional os narrows the fix availability to one system.
Inputs: query (required), os.
One fix prompt for everything to update now on a desktop system (macos, windows, linux). Returns only a digest that passed lint and review. Phones have no digest.
Inputs: os (required).
The reviewed fix procedure of one incident for one operating system. Takes an incident id returned by the other Fixlane tools. Desktop systems (macos, windows, linux) get an agent prompt: a read-only check first, then the fix. Phones (ios, android) get manual steps only.
Inputs: os (required), incident_id (required).
The newest incidents Fixlane serves, newest first, optionally for one operating system and since a date (YYYY-MM-DD). At most 20, each with its incident id.
Inputs: os, limit, since.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Live security incidents, updated hourly: fix status, fixed versions, lockfile and repo checks.
Exploited vulnerabilities, critical CVEs, breaches and AI security incidents, with primary sources.
Vulnerability records: CVE, GHSA, CISA KEV, EPSS and vendor fixes in one place. No key needed.
Software vulnerabilities (CVEs) from the US NVD and package downloads for npm, PyPI and crates
Add one secure layer between your agents and this server.
