Skip to main content
Glama
prinzalx

winsecure-mcp

by prinzalx

Related Servers

Alternatives to winsecure-mcp

No user-submitted related servers found.

    Related Servers

    • A
      license
      Not graded
      quality
      C
      maintenance
      Enables CVE lookups and risk assessment by integrating CISA Known Exploited Vulnerabilities (KEV) data and CVSS metrics. It helps users prioritize patching efforts by ranking vulnerabilities based on exploitation status and calculated risk scores.
      MIT
    • A
      license
      A
      quality
      B
      maintenance
      Enables AI agents to search, correlate, and monitor real-time vulnerability intelligence from NVD, CISA KEV, EPSS, and MITRE ATT&CK, including CVE details, critical CVE tracking, known exploited vulnerabilities, and exploitation probability scores.
      5
      2
      MIT
    • A
      license
      A
      quality
      C
      maintenance
      Unifies NVD, EPSS, CISA KEV, GitHub Advisory, and OSV into a single MCP server, enabling AI agents to query vulnerability intelligence conversationally with 23 tools for incident response, prioritization, dependency audits, and threat monitoring.
      41
      292 npm
      30
      MIT
    • A
      license
      A
      quality
      B
      maintenance
      Enables prioritizing vulnerabilities by real-world exploitation evidence, combining CISA KEV, EPSS, CVSS, and SSVC to rank CVEs and package versions, and providing fix recommendations.
      4
      1
      MIT
    • A
      license
      Not graded
      quality
      D
      maintenance
      MCP server for querying live CISA KEV, EPSS, and enriched vulnerability feeds with full provenance. Enables natural-language access to auditable security-intelligence data from Claude Desktop and other MCP clients.
      MIT

    TDQS

    A3.5/5.0

    Scored across 7 tools

    Disambiguation4/5

    Each tool targets a distinct step in the vulnerability workflow (inventory, per-program detail, CVE matching, CVE lookup, to-do listing, assessment, saving). The only soft overlap is assess_todo vs save_assessment, since assess_todo can either store a verdict itself or return an evidence package for save_assessment, but the descriptions explicitly clarify this two-path relationship.

    Naming Consistency4/5

    Six of seven tools follow a clean verb_noun pattern (scan_inventory, get_program, check_cves, list_todos, assess_todo, save_assessment). Only cve_detail breaks the pattern with a noun_noun form, a minor deviation in an otherwise predictable scheme.

    Tool Count5/5

    Seven tools is well-scoped for an inventory/CVE assessment server. Each tool maps to a clear pipeline stage and none appears redundant or filler.

    Completeness4/5

    The core lifecycle is covered: scan inventory, match CVEs, populate and list to-dos, assess them, and persist assessments. Minor gaps exist around to-do state management (e.g. dismissing/closing items or explicit status transitions beyond the assessment write-back), but agents can work around these.

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues