Which integrations are available for this server?

Provides bug bounty report templates and integrates with Bugcrowd for structured vulnerability reporting. Discovers Proof-of-Concept exploits and vulnerability intelligence from GitHub repositories, with filtering by programming language and star count. Provides bug bounty report templates and integrates with HackerOne for structured vulnerability reporting. Searches Metasploit framework modules for exploit code related to CVEs.

How do I use PocMap MCP Server?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@PocMap MCP Server find PoCs for CVE-2021-44228" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

PocMap MCP Server

by zebbern

Overview Schema Related Servers Score Discussions

Python

Remote

PocMap

Version PyPI Docs Python License Pydantic

AI-agent-optimized CVE / PoC / exploit discovery toolkit — CLI, Python API, and MCP server.

Docs: https://zebbern.github.io/pocmap/

Features

Multi-source PoCs — GitHub, Exploit-DB, Metasploit, Nuclei, labs, bug bounty write-ups; curated indexes first, then GitHub Search fallback for index-lag CVEs
MCP server — 22 tools for Claude Desktop, Cursor, and other MCP clients
CLI + CI — table/json/csv/md/sarif output, exit-code contract, bulk --fail-on SARIF gate
Cache & offline — persistent TTL'd HTTP cache and first-class --offline mode
Bug bounty toolkit — Python API checklists, workflows, templates, scope (CLI bugbounty searches write-ups only)

Related MCP server: cve-mcp

Install

pip install pocmap
pip install "pocmap[server]"          # MCP SDK / pocmap-mcp
pip install -e ".[server,dev]"        # from a clone

Python 3.10+. Optional: GITHUB_API_TOKEN, NVD_API_KEY for higher rate limits.

More: Getting started · Configuration

Quick start

pocmap lookup CVE-2021-44228
pocmap bulk cves.txt --format sarif --fail-on kev
pocmap latest --since 7d --severity critical --only-with-poc
pocmap discover "Log4j" --version 2.x
pocmap package PyPI django --version 3.2.0
pocmap doctor
pocmap lookup CVE-2021-44228 --format json
pocmap --offline lookup CVE-2021-44228

pocmap --help lists all commands. Guides: CLI reference.

MCP Server Setup

Recommended: uv on PATH, no local clone required. --from pocmap[server] pulls the package with the MCP SDK and runs the pocmap-mcp console script over STDIO.

{
  "mcpServers": {
    "pocmap": {
      "command": "uvx",
      "args": ["--from", "pocmap[server]", "pocmap-mcp"],
      "env": {
        "GITHUB_API_TOKEN": "ghp_xxxxxxxxxxxx",
        "NVD_API_KEY": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
      }
    }
  }
}

Pin a release by changing the package arg to pocmap[server]==X.Y.Z; keep pocmap-mcp as the last arg. Optional env vars raise GitHub / NVD rate limits.

Running the MCP Server

Requires the [server] extra (MCP SDK). Protocol revisions up to 2026-07-28 are supported; STDIO clients typically negotiate 2025-11-25 at initialize.

pip install "pocmap[server]"
# or from a clone: pip install -e ".[server]"

# STDIO (default — what Claude Desktop / Cursor / most MCP clients expect)
pocmap-mcp
python -m pocmap.mcp_server

# Other transports / flags
pocmap-mcp --transport sse
pocmap-mcp --transport http --host 0.0.0.0 --port 9000
pocmap-mcp --debug

MCP Tools (22 Total)

Tool	Category	Description
`lookup_cve`	CVE Intel	Full CVE details from NVD, CVE.org, CISA KEV, EPSS
`get_epss_score`	CVE Intel	EPSS exploitation probability score (0.0-1.0) with risk level
`check_kev_status`	CVE Intel	Check CISA Known Exploited Vulnerabilities catalog status
`get_attack_techniques`	CVE Intel	MITRE ATT&CK techniques a CVE maps to — how it's exploited and what follows
`find_github_pocs`	Exploits	GitHub PoC repos with stars, language, and forks
`verify_github_pocs`	Exploits	Reads PoC source to score whether a repo really exploits the CVE (opt-in)
`find_metasploit_module`	Exploits	Metasploit module availability and msfconsole command
`find_exploitdb_entry`	Exploits	ExploitDB entry with searchsploit command
`find_nuclei_template`	Exploits	Nuclei scanner template for detection/verification
`find_bug_bounty_reports`	Research	Bug bounty write-ups from HackerOne, PentesterLand
`find_practice_labs`	Labs	CTF labs on Vulhub and HackTheBox
`find_vulhub_docker`	Labs	Vulhub Docker Compose environment with setup steps
`find_recent_exploits`	Discovery	Recently published CVEs with PoC/KEV/severity filters
`discover_product_cves`	Discovery	Find CVEs by product name with version constraints
`discover_package_cves`	Discovery	Dependency vulnerabilities + the releases that fix them (OSV, no API key)
`cve_to_cpe`	Conversion	Convert CVE to affected CPE identifiers
`cpe_to_cve`	Conversion	Find all CVEs affecting a given product (CPE)
`generate_json_report`	Reports	One-shot CVE assessment — details + all exploits + labs + bug bounty reports for one or many CVEs in a single call
`generate_html_report`	Reports	Self-contained HTML report with styled cards
`get_cve_assessment_playbook`	Playbooks	Full CVE assessment workflow playbook
`get_rapid_response_playbook`	Playbooks	Emergency response playbook for critical CVEs
`get_bug_bounty_playbook`	Playbooks	Bug bounty submission workflow playbook

MCP Resources

Resource	URI Pattern	Content
CVE Info	`cve://{cve_id}`	Full CVE details as human-readable text
Exploits	`exploits://{cve_id}`	All available exploits and PoCs
Report	`report://{cve_id}`	Generated vulnerability report (JSON)

Example Agent Workflow

User: "Should I prioritize CVE-2021-44228, CVE-2023-38408, or CVE-2024-21413?"

Agent:
1. generate_json_report("CVE-2021-44228,CVE-2023-38408,CVE-2024-21413")
2. Read each entry's triage.priority / reasons (KEV, EPSS, exploit counts)
3. Prefer Log4j when triage shows KEV + highest EPSS + most PoCs

PoC-only ask → find_github_pocs (check labels / trust_score / sources). Dependency ask → discover_package_cves (use canonical_cve + aliases, not product discovery).

Claude Desktop / Cursor JSON configs and transports: Getting started → MCP. Tool inventory: MCP tools. Agent contract: .claude/skills/pocmap-agent/references/mcp_tools.md.

Python API

from pocmap.services.cve_service import CVEService

with CVEService() as svc:
    info = svc.get_cve_info("CVE-2021-44228")
print(info.cvss.base_score, info.kev_status, info.epss)

Full service examples: Python API.

Docs

Topic	Link
Getting started / MCP clients	getting-started
CLI (`latest`, `discover`, `package`, formats, cache, CI)	cli
Python API	python-api
Configuration	configuration
Bug bounty toolkit	bug-bounty
Verifying PoCs (opt-in)	verifying-pocs
Architecture	architecture
Contributing / plugins	contributing
Schemas	schemas

License

MIT — see LICENSE.

PocMap is a research and defensive tool. Always operate within applicable law and program scope.

This server cannot be installed

license - permissive license

quality - not tested

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

3dRelease cycle

9Releases (12mo)

Commit activity

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

Exploit Intel Platform MCP
Penetration Testing Security
OyaAIProd
A
license
A
quality
D
maintenance
Enables AI assistants to search and analyze vulnerabilities and exploits from multiple intelligence sources, including NVD, CISA KEV, ExploitDB, Metasploit, and more, with tools for CVE research, exploit analysis, and report generation.
Updated 3 months ago (2026-05-19 02:06 UTC)
17
MIT
cve-mcp
Security Research & Data
badchars
A
license
A
quality
A
maintenance
Unifies NVD, EPSS, CISA KEV, GitHub Advisory, and OSV into a single MCP server, enabling AI agents to query vulnerability intelligence conversationally with 23 tools for incident response, prioritization, dependency audits, and threat monitoring.
Updated 7 days ago (2026-08-13 01:24 UTC)
41
673
19
MIT
Cybersecurity Threat
Security Penetration Testing Research & Data
FoundryNet
A
license
-
quality
F
maintenance
Provides CVE search enriched with EPSS exploit likelihood and CISA KEV status, plus live IP/domain reputation and a real-time threat feed for AI agents.
Updated 9 days ago (2026-08-11 06:21 UTC)
MIT
vuln-intel-mcp
Security Penetration Testing
rohanrajnist
A
license
-
quality
C
maintenance
Provides CVE lookup, search, and exploit intelligence from public vulnerability sources (NVD, CISA KEV, EPSS) for AI agents to produce remediation guidance without consuming LLM tokens for data fetching.
Updated a month ago (2026-07-06 06:18 UTC)
1
MIT

View all related MCP servers

Related MCP Connectors

Cybersecurity Vulnerability Intel
CVE lookup via NIST NVD, CISA KEV, EPSS, and MITRE ATT&CK. 7 tools.
security-intel-mcp
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Security Intel MCP
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/zebbern/pocmap'

If you have feedback or need assistance with the MCP directory API, please join our Discord server