security-research-mcp
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@security-research-mcpsearch for the latest CISA advisories"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
🔒 Security Research MCP
An automated security research aggregator with a live-streaming web UI that pulls from IEEE, NIST, CISA, cybersecurity blogs, and policy/legislation sources weekly.
Features
Live Streaming: New articles appear instantly via Server-Sent Events (SSE)
AI Summarization: OpenAI-powered crisp summaries
Blogs/News → Abstract
Papers → Abstract + Methodology + Experiment
Flexible Search: By content, domain, source, date (year / year-month / full date)
Multiple Content Types: Papers, blogs, advisories, news
Weekly Auto-Fetch: Cron-scheduled pulls every Monday
Related MCP server: KeyboardCrumbs MCP Server
Sources
Source | Type | Domain |
IEEE Security & Privacy | Papers | Cybersecurity |
IEEE TIFS | Papers | Cybersecurity |
NIST CSRC | Papers/Standards | Standards |
NIST NVD | Advisories | Vulnerabilities |
CISA Alerts | Advisories | Cybersecurity |
CISA KEV | Advisories | Vulnerabilities |
KrebsOnSecurity | Blog | Cybersecurity |
Schneier on Security | Blog | Cryptography |
The Hacker News | News | Cybersecurity |
BleepingComputer | News | Cybersecurity |
Securelist (Kaspersky) | Blog | Threats |
Dark Reading | News | Cybersecurity |
Cisco Talos | Blog | Threats |
ESET | Blog | Threats |
ENISA | Policy | Policy |
Lawfare | Policy | Policy |
CyberScoop | News | Policy |
Setup
cd security-research-mcp
npm install
# Add your OpenAI key to .env (already created)
# Edit .env if needed
# Start the server
npm start
# Or run in dev mode with auto-reload
npm run devUsage
Start:
npm start→ Opens at http://localhost:3000First fetch: Click "⚡ Fetch Now" button or run
npm run fetchSearch: Use the search panel to filter by keywords, domain, source, date
Click any article: Expands to show AI-generated summary
Papers show: Abstract, Methodology, Experiment
Blogs/News show: Crisp Abstract
API Endpoints
Endpoint | Method | Description |
| GET | SSE live stream of new articles |
| GET | Search with filters |
| GET | Latest articles |
| GET | Article detail with AI summary |
| GET | Database statistics |
| POST | Trigger manual fetch |
Date Flexibility
The date filter accepts:
Year only:
2025→ searches all of 2025Year-Month:
2025-07→ searches July 2025Full date:
2025-07-10→ exact date
Configuration
Edit .env:
OPENAI_API_KEY=your-key-here
PORT=3000
FETCH_CRON=0 0 * * 1 # Every Monday at midnightCron format: minute hour day-of-month month day-of-week
0 0 * * 1= Weekly Monday midnight0 */6 * * *= Every 6 hours0 0 * * *= Daily midnight
This server cannot be deployed
Maintenance
Related MCP Connectors
Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.
Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)
AI-powered threat intelligence, smart contract auditing, and cybersecurity OSINT.
Defensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS
Related MCP Servers
- AlicenseAqualityAmaintenanceAggregates real-time threat intelligence from multiple sources including Feodo Tracker, URLhaus, CISA KEV, and ThreatFox, with IP/hash reputation checking via VirusTotal, AbuseIPDB, and Shodan for comprehensive security monitoring.11636MIT
- AlicenseAqualityNot gradedmaintenanceProvides real-time threat intelligence including IP risk scores, CVE lookups, and malware hash analysis without requiring an API key. It enables users to monitor active threats, predict CISA KEV additions, and detect pre-attack infrastructure staging through natural language.8MIT
- FlicenseNot gradedqualityDmaintenanceProvides a unified interface for security analysts to gather threat intelligence from multiple sources including VirusTotal, Shodan, NVD, AnyRun, AlienVault OTX, and GitHub.10 npm-
- AlicenseNot gradedqualityFmaintenanceProvides unified access to vulnerability data from NVD, MITRE, and GitHub Security Advisories for cybersecurity intelligence.34 npm19MIT