MCP Vulnerability Checker Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| cve_lookupC | Lookup CVE vulnerability information from the National Vulnerability Database |
| package_vulnerability_checkA | Check for known vulnerabilities in Python packages using OSV database |
| get_epss_scoreA | Get EPSS exploitability prediction score for a CVE |
| calculate_cvss_scoreB | Calculate CVSS base score from vector string |
| search_vulnerabilitiesC | Search vulnerability databases with advanced filtering |
| get_exploit_availabilityA | Check for public exploits and PoCs for a CVE |
| get_vulnerability_timelineC | Get vulnerability timeline and patch status information |
| get_vex_statusC | Check VEX vulnerability status for specific products |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 8 tools
Each tool has a clearly distinct purpose within the vulnerability domain: CVSS scoring, CVE lookup, EPSS scoring, exploit availability, VEX status, timeline tracking, package checking, and vulnerability search. No tools appear to overlap or cause confusion, as each targets a specific aspect of vulnerability assessment.
All tools follow a consistent verb_noun pattern (e.g., calculate_cvss_score, get_epss_score, search_vulnerabilities). The naming is uniform across the set, using descriptive verbs like 'calculate', 'get', 'check', and 'search' paired with clear nouns, making it easy to understand each tool's function.
With 8 tools, the server is well-scoped for vulnerability checking, covering key areas like scoring, lookup, exploit assessment, and package analysis. Each tool earns its place by addressing a distinct need in the domain, avoiding both bloat and gaps in functionality.
The tool set provides comprehensive coverage for vulnerability assessment, including scoring (CVSS, EPSS), information retrieval (CVE lookup, timeline), exploit analysis, package checks, and search capabilities. There are no obvious gaps; it supports a full workflow from detection to prioritization.