About CVE Risk Check
CVE Risk Check is a read-only MCP server for triaging CVEs by severity, exploitation status, and likelihood of exploitation. It is intended for security reviews and vulnerability prioritization without an API key.
Key features
- 01CVE severity assessment
- 02Exploitation status
- 03Exploitation likelihood
- 04Read-only access
- 05No key required
Use cases
- 01Prioritize vulnerabilities for review
- 02Check whether a CVE is exploited
- 03Assess potential exploitation risk
MCP support
It exposes CVE triage information to MCP clients through the `https://cve.openkrill.app/mcp` endpoint. The server is public and read-only, with no key required.
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://cve.openkrill.app/mcpclaude mcp add --transport http app-openkrill-cve https://cve.openkrill.app/mcp{"mcpServers":{"app-openkrill-cve":{"type":"http","url":"https://cve.openkrill.app/mcp"}}}Open in Cursor{"servers":{"app-openkrill-cve":{"type":"http","url":"https://cve.openkrill.app/mcp"}}}Open in VS Code{"mcpServers":{"app-openkrill-cve":{"type":"http","url":"https://cve.openkrill.app/mcp"}}}{"mcpServers":{"app-openkrill-cve":{"serverUrl":"https://cve.openkrill.app/mcp"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
Tools
6| Parameter | Type | Required | Description |
|---|---|---|---|
| cve | string | Yes | A CVE id such as "CVE-2021-44228" |
Details
From the project READMEDeveloper and Security Checks
Package health, CVE triage, software end-of-life and licence facts, DESIGN.md lint and diff, and AI coding agent news.
claude plugin install dev-security@openkrill
| Skill and MCP server | Tool | Endpoint |
|---|---|---|
packages | Package Health Check | https://packages.openkrill.app/mcp |
cve | CVE Risk Check | https://cve.openkrill.app/mcp |
dev-facts | Dev Facts Check | https://devfacts.openkrill.app/mcp |
design-md | DESIGN.md Linter & Extractor | https://designmd.openkrill.app/mcp |
industry-pulse | Industry Pulse | https://pulse.openkrill.app/mcp |
agent-trace | Agent Trace Check | https://agenttrace.openkrill.app/mcp |
injection-scan | Prompt Injection Scanner | https://injectionscan.openkrill.app/mcp |
Every server is public, read-only and needs no key. Generated from the Agent Tools plugin listings; edits made here are overwritten.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.