Scan MCP server configuration files to identify security vulnerabilities including CVEs, authentication issues, typo-squatting, and exposed secrets.
AGPL 3.0
472,986 tools. Updated 2026-08-24 07:50
"MCP server for analyzing CVEs (Common Vulnerabilities and Exposures)" matching MCP tools:
- Search for CVEs by vendor name and optionally filter by product to find known vulnerabilities affecting your assets.MIT
- Get MCP server environment details: version info for server, FastMCP, MCP protocol, and Python runtime. Use for debugging and compatibility checks.Apache 2.0
- Retrieve the cross-asset residual correlation matrix for a model group to reveal unexplained co-movement after factor exposures, exposing missing common factors.MIT
- Retrieve all CVEs affecting a specific system by its UUID. Sort, filter, and paginate results to identify vulnerabilities impacting that system.Apache 2.0
- Check security vulnerabilities and CVEs for packages to support security audits and vulnerability assessments.MIT
Matching MCP Servers
- FlicenseAqualityDmaintenanceMCP server for Common Crawl CDX that enables backlink discovery, expired domain finding, and competitor gap analysis without requiring API keys.4
- AlicenseAqualityCmaintenanceMCP server and CLI for querying Common Crawl via AWS Athena, enabling users to check a domain's presence in crawls, analyze dynamics, compare domains, and inspect page text.13MIT
Matching MCP Connectors
MCP server for Blockscout
Rick and Morty MCP — wraps the Rick and Morty API (free, no auth)
- Refresh the CISA Known Exploited Vulnerabilities catalog to identify exploited CVEs and annotate cached records for prioritized remediation.MIT
- Analyze code files for security vulnerabilities using Symbiotic CLI. Scans temporary copies without altering your workspace.MIT
- Look up known vulnerabilities (CVEs) for a specified software name and version using the NVD API. Identify security issues to inform patch management.MIT
- Retrieve a list of CVEs impacting your account, with metadata, affected system counts, and filtering options like impact, CVSS score, and known exploits.Apache 2.0
- Scan package lockfiles for known vulnerabilities, prioritize risks with EPSS exploit probability, and receive fix recommendations.MIT
- Check any software package for known CVEs and security advisories by querying the OSV database, with support for version-specific and ecosystem-aware searches.MIT
- Audit a technology stack for exploitable vulnerabilities. Accepts a comma-separated list of technologies (max 5) and returns risk-sorted critical/high severity CVEs with public exploits.MIT
- Evaluate CVEs using EPSS scores, CVSS severity, and KEV status to prioritize vulnerabilities for remediation.MIT
- Check specific npm package versions for known vulnerabilities. Get matching advisories with severity, CVEs, and patched versions.MIT
- Batch-scan MCP server names from fleet inventory to get per-server risk assessment with known CVEs and verdicts. Categorizes risk from filesystem, database, and search services.Apache 2.0
- Search and filter vulnerabilities using criteria like severity, status, CVSS score, publication date, or keywords to identify security risks in systems.MIT
- Scan SKILL.md packages and agent tool definitions for security vulnerabilities including tool poisoning, command injection, data exfiltration, and prompt injection. Maps findings to OWASP Agentic and MCP Top 10.Apache 2.0
- Search for vulnerabilities (CVEs) with full-text search and filters for severity, exploit status, CISA KEV, ransomware, and CVSS/EPSS thresholds. Returns exploitation signals and attribution.MIT
- Retrieve open Tenable vulnerabilities for a specific OT asset, including CVEs, CVSS v3 scores, exploit availability flags, and vendor solutions.Apache 2.0