Scan MCP server configurations to identify security vulnerabilities including CVEs, authentication issues, typo-squatting, and exposed secrets.
AGPL 3.0
260,522 tools. Last updated 2026-07-05 07:02
"MCP server for analyzing CVEs (Common Vulnerabilities and Exposures)" matching MCP tools:
- Search for CVEs by vendor name and optionally filter by product to find known vulnerabilities affecting your assets.MIT
- Scan codebases for security vulnerabilities with deterministic checks and graph-aware severity scoring. Detects CVEs, injection, secrets, XSS, and more, returning prioritized findings with attack scenarios and fixes.Business Source 1.1
- Scan a Docker image for known CVEs using Docker Scout. Filter results by severity, fix availability, or base image, and choose from JSON, SARIF, SPDX, list, markdown, or text output.MIT
- Retrieve all CVEs affecting a specific system to assess vulnerabilities and prioritize remediation.Apache 2.0
- Check security vulnerabilities and CVEs for packages to support security audits and vulnerability assessments.MIT
Matching MCP Servers
- Flicense-qualityBmaintenanceZero-dependency MCP server that provides AI models with secure read/write/exec access to local files and directories over HTTP and SSE, designed to be tunneled via ngrok for integration with Claude Web.Last updated
- Flicense-qualityDmaintenanceMCP server for Common Crawl CDX that enables backlink discovery, expired domain finding, and competitor gap analysis without requiring API keys.Last updated
Matching MCP Connectors
Rick and Morty MCP — wraps the Rick and Morty API (free, no auth)
MCP server for Blockscout
- Retrieve CVEs affecting your account, including metadata and affected system counts. Filter by CVSS score, impact, known exploits, and advisory availability to pinpoint critical vulnerabilities.Apache 2.0
- Audit a technology stack for exploitable vulnerabilities. Accepts a comma-separated list of technologies (max 5) and returns risk-sorted critical/high severity CVEs with public exploits.MIT
- Evaluate CVEs using EPSS scores, CVSS severity, and KEV status to prioritize vulnerabilities for remediation.MIT
- Batch-scan MCP server names against the security metadata registry to return per-server risk assessment with registry match status, risk category, known CVEs, and verdict.Apache 2.0
- Search and filter vulnerabilities using criteria like severity, status, CVSS score, publication date, or keywords to identify security risks in systems.MIT
- Scan SKILL.md packages and agent tool definitions for security vulnerabilities including tool poisoning, command injection, data exfiltration, and prompt injection. Maps findings to OWASP Agentic and MCP Top 10.Apache 2.0
- Search for vulnerabilities (CVEs) with full-text search and filters for severity, exploit status, CISA KEV, ransomware, and CVSS/EPSS thresholds. Returns exploitation signals and attribution.MIT
- Query OSV.dev for known vulnerabilities in packages before installation to ensure safety and prevent installing compromised dependencies.Apache 2.0
- Scan an MCP server for security vulnerabilities, description quality, and architecture issues. Get a security rating from F to A+ with actionable recommendations for safe deployment.MIT
- Search the Common Platform Enumeration (CPE) dictionary to find CPE 2.3 URIs for product identifiers used by CVEs. Required before searching CVEs by affected product.MIT
- Lists Common Weakness Enumeration (CWE) categories sorted by number of vulnerabilities. Provides CWE ID, name, label, exploit likelihood, and linked CVEs.MIT
- Scan AI supply chain security by analyzing repositories, Docker images, packages, or local MCP configurations. Returns an AI-BOM with dependencies, vulnerabilities, blast radius, and remediation.Apache 2.0
- Scan project dependencies for known vulnerabilities using npm audit and the GitHub Advisory Database. Returns CVEs, severity levels, and patched versions to identify security risks.MIT
- Scans npm dependencies for known vulnerabilities using the GitHub Advisory Database. Identifies CVEs, severity levels, and patched versions to help secure your project.MIT