cve.now のリモート MCP サーバーとは何ですか?
cve.now のリモート MCP サーバーは、https://mcp.cve.now/mcp にホストされた Model Context Protocol エンドポイントです。AI アシスタントはローカルに何もインストール・実行することなく接続できます。
cve.now MCP Server認証済み注目
@Sazabi
基本情報
cve.now MCP Server について
Free, public vulnerability feed for coding agents. One deduplicated entry per CVE, GHSA or OSV id, merged from the CVE List, GitHub Advisories, OSV, NVD, CISA KEV, EPSS and Exploit-DB. check_stack scans a lockfile for known vulnerabilities. No login, no API key.
接続情報
https://mcp.cve.now/mcpセットアップ
claude mcp add cve-now --transport http https://mcp.cve.now/mcpcve.now MCP Server のツール
5Get one vulnerability entry by CVE, GHSA or OSV id, as JSON. Includes CISA SSVC decision points (exploitation, automatable, technicalImpact) when CISA published them, and, when cve.now has read the vendor advisory, context (a plain sentence, sourced conditions, vendor severity, fix, FAQ) with exposure: Actively exploited, Default setups, Specific setups only or Unclear.
List the newest items in a cve.now feed. Pass name for one stored feed (critical, all, kev, tech/<slug>, ecosystem/<eco>; critical when nothing is passed), or any of filter, tech and ecosystem to narrow it. Each of those takes one value or a list: an item must match any listed value of a field, and every field passed. Up to 16 combinations of values.
Check exact package versions against cve.now's synced vulnerability catalog. Pass a lockfile, a package list, or the stack_id of a lockfile uploaded to cve.now. For a large lockfile, upload it instead of passing its contents: curl --data-binary @<file> -H 'X-Lockfile-Name: <file name>' https://cve.now/api/stack returns its id. A flake.lock is checked by the git commit each input pins, through OSV, and its nixpkgs package CVEs are not checked. No matches means none found, not a guarantee of safety.
Get the cve.now Index: the worst CVEs published or escalated this week, month or year, or of all time (window all: every CVE ever in KEV or with a Metasploit module, plus the past year), ranked by a 0-100 score (exploitation 40, exposure 25, reach 20, severity 10, no patch 5; methodology at https://cve.now/leaderboard/methodology). Narrow with tech, ecosystem and filter (critical, kev); a row matches any listed value of a field and every field passed. Pass week (YYYY-Www) instead, without tech, ecosystem or filter, for an archived week's top 25. Week rows carry movement since the previous week.
Search cve.now's vulnerabilities and early warnings with advisory.dev's query language: free text, "quoted phrases" and ids, plus keys such as vendor:, package:, affects:lodash@4.17.20, severity:, cvss:>=9, kev:true, epss:, published:<30d, type:cve|early_warning, tech:, confidence: and category:, and sort:relevance|published|modified|cvss. Terms are ANDed, commas OR values, a leading - excludes. Unverified early warnings appear only with confidence:unverified. Pass next_cursor back as cursor for the next page.
概要
What is cve.now?
A free vulnerability feed that merges the CVE List, GitHub Advisory Database, OSV, NVD, ENISA EUVD, CISA KEV, EPSS and Exploit-DB into one entry per vulnerability.
Tools
- get_vulnerability: one CVE/GHSA/OSV entry: severity, affected versions, fixes, exploitation
- list_feed: newest entries, filtered by critical, KEV, technology or ecosystem
- check_stack: check a lockfile or package list for known vulnerabilities
- get_leaderboard: the cve.now Index, the worst CVEs this week
- search: find entries by keyword
Try it
"Run check_stack on this project's lockfile and list any known vulnerabilities."
よくある質問
cve.now の MCP サーバーにはどう接続しますか?
エンドポイント https://mcp.cve.now/mcp を Claude Code、Cursor、VS Code など任意の MCP 対応クライアントに追加してください。このページのセットアップ手順で各クライアントを一度に設定できます。
cve.now の MCP サーバーは認証が必要ですか?
いいえ。cve.now の MCP サーバーは認証不要です——エンドポイント URL で直接接続できます。
cve.now の MCP サーバーはどのトランスポートを使用しますか?
cve.now は Streamable HTTP エンドポイントを公開しており、これはリモート MCP サーバーで広く使われ、主要な MCP クライアントがサポートするトランスポートです。
他のリモート MCP サーバー
AQL PropertyCheck — Physical check of one exact address
Check one exact Gold Coast or Brisbane City property address. Free address/coverage check and short summary; paid structured Agent JSON adds available building, street and surrounding context, with Brisbane routed journe
%20-%20Sarah%20Xu.svg){kind=icon}
Adobe Experience Manager
Manage your Adobe Experience Manager content
AWS Marketplace
Discover, evaluate, and buy solutions for the cloud
Adgentek Ad Server (AdsMCP)
AdsMCP is the MCP entry point into the Adgentek Ad Server. Call ads_serve with the conversation context and get back a native ad matched to user intent, or no ad when one does not fit. Publishers earn on a CPM basis. Fre
AI Video MCP by AITuber
AI Video MCP by AITuber is a hosted MCP server that lets AI agents create and publish video. You connect it once, then ask your agent for a video in plain language. It writes the script, picks a voice, generates the visu
コメント