winsecure-mcp
Related Servers
Alternatives to winsecure-mcp
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityCmaintenanceEnables CVE lookups and risk assessment by integrating CISA Known Exploited Vulnerabilities (KEV) data and CVSS metrics. It helps users prioritize patching efforts by ranking vulnerabilities based on exploitation status and calculated risk scores.MIT
- AlicenseAqualityBmaintenanceEnables AI agents to check industrial and IT devices by vendor, product, and firmware version, returning affecting CVEs, fixes, vendor advisories, fix plans, and change tracking through read-only tools.4MIT
- AlicenseAqualityBmaintenanceEnables AI agents to search, correlate, and monitor real-time vulnerability intelligence from NVD, CISA KEV, EPSS, and MITRE ATT&CK, including CVE details, critical CVE tracking, known exploited vulnerabilities, and exploitation probability scores.52MIT
- AlicenseAqualityCmaintenanceUnifies NVD, EPSS, CISA KEV, GitHub Advisory, and OSV into a single MCP server, enabling AI agents to query vulnerability intelligence conversationally with 23 tools for incident response, prioritization, dependency audits, and threat monitoring.41292 npm30MIT
- AlicenseAqualityBmaintenanceEnables prioritizing vulnerabilities by real-world exploitation evidence, combining CISA KEV, EPSS, CVSS, and SSVC to rank CVEs and package versions, and providing fix recommendations.41MIT
- AlicenseNot gradedqualityDmaintenanceMCP server for querying live CISA KEV, EPSS, and enriched vulnerability feeds with full provenance. Enables natural-language access to auditable security-intelligence data from Claude Desktop and other MCP clients.MIT
TDQS
Scored across 7 tools
Each tool targets a distinct step in the vulnerability workflow (inventory, per-program detail, CVE matching, CVE lookup, to-do listing, assessment, saving). The only soft overlap is assess_todo vs save_assessment, since assess_todo can either store a verdict itself or return an evidence package for save_assessment, but the descriptions explicitly clarify this two-path relationship.
Six of seven tools follow a clean verb_noun pattern (scan_inventory, get_program, check_cves, list_todos, assess_todo, save_assessment). Only cve_detail breaks the pattern with a noun_noun form, a minor deviation in an otherwise predictable scheme.
Seven tools is well-scoped for an inventory/CVE assessment server. Each tool maps to a clear pipeline stage and none appears redundant or filler.
The core lifecycle is covered: scan inventory, match CVEs, populate and list to-dos, assess them, and persist assessments. Minor gaps exist around to-do state management (e.g. dismissing/closing items or explicit status transitions beyond the assessment write-back), but agents can work around these.