mcpdirectory.dev
9,129 servers · updated 23 Sept

Cve Vulnerability Lookup MCP server

official from Datakoot Active last commit 19 d 
{
  "mcpServers": {
    "datakoot-cve-vulnerability-lookup": {
      "type": "http",
      "url": "https://security.datakoot.com/mcp"
    }
  }
}
file .mcp.json (in your project root)version 2.1.0

What it does

Exposes three tools for vulnerability lookups and dependency auditing: CVE details from the National Vulnerability Database, package vulnerability data from OSV.dev, and bulk auditing of dependency manifests. Designed for AI agents to check security vulnerabilities during task execution without requiring API keys.

  • Check CVE details including CVSS score, severity, and CWE references when a specific vulnerability ID is mentioned.
  • Look up known vulnerabilities for a specific package and version to assess risk during dependency review.
  • Audit all dependencies in a package.json file at once to identify multiple vulnerabilities across a project.

Tools this server exposes

ToolDoes
cve_lookupRetrieve CVE summary with description, CVSS score, severity, CWE, and references from the National Vulnerability Database.
package_vulnerabilitiesList known vulnerabilities for a specified package and version from OSV.dev.
audit_dependenciesAudit an entire package.json or dependency list in a single call to identify vulnerabilities across all dependencies.

Before you enable it

An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.