About Security Intel MCP
Security Intel MCP gives AI agents access to vulnerability lookups and dependency audits. It combines CVE information with exploitation and probability signals, and also checks package vulnerabilities without API keys.
Key features
- 01Look up CVE details and severity
- 02Check CISA known-exploited entries
- 03Retrieve EPSS scores
- 04Find package-version vulnerabilities
- 05Audit package manifests or dependency lists
Use cases
- 01Assess a CVE during incident triage
- 02Identify vulnerabilities exploited in the wild
- 03Audit dependencies before deployment
MCP support
Exposes vulnerability intelligence and dependency-audit tools to MCP clients through a hosted endpoint. No API key is required.
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://security.datakoot.com/mcpclaude mcp add --transport http com-datakoot-cve-vulnerability-lookup https://security.datakoot.com/mcp{"mcpServers":{"com-datakoot-cve-vulnerability-lookup":{"type":"http","url":"https://security.datakoot.com/mcp"}}}Open in Cursor{"servers":{"com-datakoot-cve-vulnerability-lookup":{"type":"http","url":"https://security.datakoot.com/mcp"}}}Open in VS Code{"mcpServers":{"com-datakoot-cve-vulnerability-lookup":{"type":"http","url":"https://security.datakoot.com/mcp"}}}{"mcpServers":{"com-datakoot-cve-vulnerability-lookup":{"serverUrl":"https://security.datakoot.com/mcp"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
Tools
5| Parameter | Type | Required | Description |
|---|---|---|---|
| cve_id | string | Yes | CVE identifier, e.g. CVE-2021-44228 (case-insensitive; a bare 2021-44228 also works). |
Details
From the project READMESecurity Intel MCP — by Datakoot
Vulnerability intelligence for AI agents — as MCP tools your agent can call mid-task. One keyless call fuses NVD, CISA KEV and FIRST EPSS. No API keys.
Tools
| Tool | What it does | Source |
|---|---|---|
cve_lookup | CVE summary: description, CVSS score & severity, CWE, references, plus whether it is actively exploited (CISA KEV) and its exploit probability (EPSS) | NVD (NIST), CISA KEV, FIRST EPSS |
known_exploited | Is a CVE on CISA's Known Exploited Vulnerabilities catalog? Or list the newest exploited CVEs (filter by vendor, product or ransomware use) | CISA KEV |
epss_score | Exploit probability (0–1) and percentile for one or many CVEs: the chance each is exploited in the next 30 days | FIRST EPSS |
package_vulnerabilities | Known vulnerabilities for a package/version | OSV.dev |
audit_dependencies | Audit a whole package.json (or dependency list) in one call | OSV.dev |
No API keys required for any tool.
Quick start
claude mcp add --transport http security-intel https://security.datakoot.com/mcp
Or point any MCP client at https://security.datakoot.com/mcp.
Try it in 10 seconds — no key, no signup
Paste this into a terminal:
curl -s https://security.datakoot.com/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
-d '{"jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": {"name": "cve_lookup", "arguments": {"cve_id": "CVE-2021-44228"}}}'
You get Log4Shell (CVE-2021-44228) in one answer: the NVD record (severity, CVSS vector, references), its CISA KEV entry (exploited in the wild, used in ransomware) and its EPSS exploit probability. No API key, nothing to sign up for.
Or point any MCP client at the URL and just ask your agent, in plain language:
- "Is CVE-2021-44228 something I need to worry about?"
- "Which of these CVEs is actually being exploited right now?"
- "Audit my package.json for known vulnerabilities before I deploy."
Data & attribution
Vulnerability data comes from the National Vulnerability Database (NIST — US public domain), CISA's Known Exploited Vulnerabilities catalog (US public domain), FIRST EPSS and OSV.dev (CC-BY 4.0), the same open sources used by scanners like Trivy and Grype.
Part of Datakoot — keyless intelligence APIs for AI agents.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.