cve.now 远程 MCP 服务器是什么?
cve.now 的远程 MCP 服务器是一个托管的 Model Context Protocol 端点,地址是 https://mcp.cve.now/mcp,AI 助手无需在本地安装或运行任何东西即可连接。
cve.now MCP Server已验证已精选
@Sazabi
基本信息
关于 cve.now MCP Server
Free, public vulnerability feed for coding agents. One deduplicated entry per CVE, GHSA or OSV id, merged from the CVE List, GitHub Advisories, OSV, NVD, CISA KEV, EPSS and Exploit-DB. check_stack scans a lockfile for known vulnerabilities. No login, no API key.
连接信息
https://mcp.cve.now/mcp接入方式
claude mcp add cve-now --transport http https://mcp.cve.now/mcpcve.now MCP Server 工具
5Get one vulnerability entry by CVE, GHSA or OSV id, as JSON. Includes CISA SSVC decision points (exploitation, automatable, technicalImpact) when CISA published them, and, when cve.now has read the vendor advisory, context (a plain sentence, sourced conditions, vendor severity, fix, FAQ) with exposure: Actively exploited, Default setups, Specific setups only or Unclear.
List the newest items in a cve.now feed. Pass name for one stored feed (critical, all, kev, tech/<slug>, ecosystem/<eco>; critical when nothing is passed), or any of filter, tech and ecosystem to narrow it. Each of those takes one value or a list: an item must match any listed value of a field, and every field passed. Up to 16 combinations of values.
Check exact package versions against cve.now's synced vulnerability catalog. Pass a lockfile, a package list, or the stack_id of a lockfile uploaded to cve.now. For a large lockfile, upload it instead of passing its contents: curl --data-binary @<file> -H 'X-Lockfile-Name: <file name>' https://cve.now/api/stack returns its id. A flake.lock is checked by the git commit each input pins, through OSV, and its nixpkgs package CVEs are not checked. No matches means none found, not a guarantee of safety.
Get the cve.now Index: the worst CVEs published or escalated this week, month or year, or of all time (window all: every CVE ever in KEV or with a Metasploit module, plus the past year), ranked by a 0-100 score (exploitation 40, exposure 25, reach 20, severity 10, no patch 5; methodology at https://cve.now/leaderboard/methodology). Narrow with tech, ecosystem and filter (critical, kev); a row matches any listed value of a field and every field passed. Pass week (YYYY-Www) instead, without tech, ecosystem or filter, for an archived week's top 25. Week rows carry movement since the previous week.
Search cve.now's vulnerabilities and early warnings with advisory.dev's query language: free text, "quoted phrases" and ids, plus keys such as vendor:, package:, affects:lodash@4.17.20, severity:, cvss:>=9, kev:true, epss:, published:<30d, type:cve|early_warning, tech:, confidence: and category:, and sort:relevance|published|modified|cvss. Terms are ANDed, commas OR values, a leading - excludes. Unverified early warnings appear only with confidence:unverified. Pass next_cursor back as cursor for the next page.
概览
What is cve.now?
A free vulnerability feed that merges the CVE List, GitHub Advisory Database, OSV, NVD, ENISA EUVD, CISA KEV, EPSS and Exploit-DB into one entry per vulnerability.
Tools
- get_vulnerability: one CVE/GHSA/OSV entry: severity, affected versions, fixes, exploitation
- list_feed: newest entries, filtered by critical, KEV, technology or ecosystem
- check_stack: check a lockfile or package list for known vulnerabilities
- get_leaderboard: the cve.now Index, the worst CVEs this week
- search: find entries by keyword
Try it
"Run check_stack on this project's lockfile and list any known vulnerabilities."
常见问题
怎么连接 cve.now 的 MCP 服务器?
把端点 https://mcp.cve.now/mcp 添加到任意支持 MCP 的客户端,比如 Claude Code、Cursor 或 VS Code。本页的接入代码块可以一步配置好每个客户端。
cve.now 的 MCP 服务器需要认证吗?
不需要。cve.now 的 MCP 服务器不需要认证——直接用端点地址连接即可。
cve.now 的 MCP 服务器用的是哪种传输方式?
cve.now 暴露的是 Streamable HTTP 端点,这是远程 MCP 服务器普遍使用、主流客户端都支持的传输方式。
更多远程 MCP 服务器
AIsa
AIsa is one key for 950+ data APIs across SEO and AI visibility, finance, social, web search, sales and agent mail — the go-to-market data stack behind prospecting, competitor research and brand monitoring. Five tools ra
%20-%20Sarah%20Xu.svg){kind=icon}
Adobe Journey Optimizer
Understand and troubleshoot your Journeys and Campaigns
AdWhispr
Research competitors' winning ads, clone them for your brand and launch paused campaigns on Meta, Google and TikTok from chat.
AWS Marketplace
Discover, evaluate, and buy solutions for the cloud
Adgentek Ad Server (AdsMCP)
AdsMCP is the MCP entry point into the Adgentek Ad Server. Call ads_serve with the conversation context and get back a native ad matched to user intent, or no ad when one does not fit. Publishers earn on a CPM basis. Fre
评论