How do I install Security Intel MCP?

Copy the http config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Security Intel MCP need an API key?

No required environment variable is listed on this record.

What transport does Security Intel MCP use?

Security Intel MCP is reached over HTTP.

When was Security Intel MCP last checked?

Last checked 2026-11-08. CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Security Intel MCP server

Power your agent

Add this server

The publisher's own URL. Not a PlugMCP endpoint.

Add to Cursor Add in Claude Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Server URL

https://security.datakoot.com/mcp

The Claude button above opens Claude with the name and URL filled in. You still confirm it there.

shClaude Code

1claude mcp add --transport http com.datakoot-cve-vulnerability-lookup https://security.datakoot.com/mcp

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "com.datakoot-cve-vulnerability-lookup": {4      "command": "npx",5      "args": [6        "-y",7        "mcp-remote",8        "https://security.datakoot.com/mcp"9      ]10    }11  }12}

claude_desktop_config.json

Remote · HTTPPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Remote

Transport: http
Version: 2.1.0
Last checked

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

Security Intel MCP — by Datakoot

Vulnerability intelligence for AI agents — as MCP tools your agent can call mid-task. One keyless call fuses NVD, CISA KEV and FIRST EPSS. No API keys.

Tools

Tool	What it does	Source
`cve_lookup`	CVE summary: description, CVSS score & severity, CWE, references, plus whether it is actively exploited (CISA KEV) and its exploit probability (EPSS)	NVD (NIST), CISA KEV, FIRST EPSS
`known_exploited`	Is a CVE on CISA's Known Exploited Vulnerabilities catalog? Or list the newest exploited CVEs (filter by vendor, product or ransomware use)	CISA KEV
`epss_score`	Exploit probability (0–1) and percentile for one or many CVEs: the chance each is exploited in the next 30 days	FIRST EPSS
`package_vulnerabilities`	Known vulnerabilities for a package/version	OSV.dev
`audit_dependencies`	Audit a whole package.json (or dependency list) in one call	OSV.dev

No API keys required for any tool.

Quick start

claude mcp add --transport http security-intel https://security.datakoot.com/mcp

Or point any MCP client at https://security.datakoot.com/mcp.

Try it in 10 seconds — no key, no signup

Paste this into a terminal:

curl -s https://security.datakoot.com/mcp \ -H 'content-type: application/json' \ -H 'accept: application/json, text/event-stream' \ -d '{"jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": {"name": "cve_lookup", "arguments": {"cve_id": "CVE-2021-44228"}}}'

You get Log4Shell (CVE-2021-44228) in one answer: the NVD record (severity, CVSS vector, references), its CISA KEV entry (exploited in the wild, used in ransomware) and its EPSS exploit probability. No API key, nothing to sign up for.

Or point any MCP client at the URL and just ask your agent, in plain language:

"Is CVE-2021-44228 something I need to worry about?"

"Which of these CVEs is actually being exploited right now?"

"Audit my package.json for known vulnerabilities before I deploy."

Data & attribution

Vulnerability data comes from the National Vulnerability Database (NIST — US public domain), CISA's Known Exploited Vulnerabilities catalog (US public domain), FIRST EPSS and OSV.dev (CC-BY 4.0), the same open sources used by scanners like Trivy and Grype.

Part of Datakoot — keyless intelligence APIs for AI agents.

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install Security Intel MCP?

Does Security Intel MCP need an API key?

What transport does Security Intel MCP use?

When was Security Intel MCP last checked?

Documentation

Security Intel MCP — by Datakoot

Tools

Quick start

Try it in 10 seconds — no key, no signup

Data & attribution