What is cve-mcp-server? Overview, metrics & alternatives

cve-mcp-server is a skill AI agent for To allow the Claude AI agent to automatically call external security APIs for vulnerability analysis, threat intelligence retrieval, and risk assessment. Pricing: Free. As of 2026-09-10, KanonAgent records 37 upvotes. First indexed by KanonAgent on 2026-08-31.

A production-grade MCP server that gives Claude access to 21 security intelligence APIs including CVE lookup, EPSS, CISA KEV, MITRE ATT&CK, and more.

37 upvotes

Tracked by Kanon since Aug 31, 2026

Accelerating

status

63/100

momentum · conf 0.83

10d

tracked since 2026-08-31

2026-09-10

last meaningful change

evidence records

Status basis: github_stars gained 131 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)

📈 Timelinewhat changed, and when

2026-09-10 Accelerating github_stars gained 131 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)
2026-09-10 Anomaly daily change 10.0 is -6.3 standard deviations from this entity's own prior mean (17.7±1.2, baseline excludes this point) — unusual, not necessarily adoption
2026-09-09 Accelerating github_stars gained 131 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)
2026-09-09 Anomaly daily change 10.0 is -6.3 standard deviations from this entity's own prior mean (17.7±1.2, baseline excludes this point) — unusual, not necessarily adoption
2026-09-08 Accelerating github_stars gained 121 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)
2026-09-08 Anomaly daily change 10.0 is -6.3 standard deviations from this entity's own prior mean (17.7±1.2, baseline excludes this point) — unusual, not necessarily adoption
2026-09-07 Accelerating github_stars gained 108 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)
2026-08-31 first observed Kanon started keeping permanent history for this agent

🔎 Known / Unknown 14 of 23 fields unknown

Machine-callable	—	unknown	—
Open source	1	verified	1 quote(s)
Self-hostable	—	unknown	—
Bring your own key	—	unknown	—
Autonomy level	2	inferred	1 quote(s)
Pricing model	—	unknown	—
Integrations	mcp	inferred	1 quote(s)

“Unknown” means we have not verified it — it is not a “no”. Hard filters never treat unknown as false.

🤖 Agent teardown · skill

Job to be doneTo allow the Claude AI agent to automatically call external security APIs for vulnerability analysis, threat intelligence retrieval, and risk assessment.

AutonomyL2 · tool-calling(evidence: "28 security tools across 24 APIs…")

Who it is forSecurity researchers and DevSecOps teams

Prerequisitesopen source

Integrationsmcp

PricingFree

Traction · why it is risingEarned 29 votes on Product Hunt and includes clear documentation on GitHub.

Why it matters

It bridges large models with professional security tooling, creating a programmable security analysis agent and serving as a key skill-layer component in the agent ecosystem.

Evidence quotesverbatim, from the product’s own materials

“public GitHub repository (README fetched)”— structural

“28 security tools across 24 APIs”— readme

“Production-grade MCP server giving Claude 27 security intelligence tools”— description

“A production-grade Model Context Protocol (MCP) server that turns Claude into a full-spectrum security analyst.”— readme

Python

Signal source: GitHub

Visit official site →

📛 Official badgefor your site / README

Building cve-mcp-server? Pick a style above — the embed code updates live. Deep color control via URL params: bg= / fg= / accent= (hex). It links back to this page.

On mobile tap Share for WeChat / RED (Xiaohongshu) / X; on desktop use Copy text and paste into the app.

FAQ

What is cve-mcp-server?

A production-grade MCP server that gives Claude access to 21 security intelligence APIs including CVE lookup, EPSS, CISA KEV, MITRE ATT&CK, and more.

What does cve-mcp-server do?

To allow the Claude AI agent to automatically call external security APIs for vulnerability analysis, threat intelligence retrieval, and risk assessment.

Why does cve-mcp-server matter?

It bridges large models with professional security tooling, creating a programmable security analysis agent and serving as a key skill-layer component in the agent ecosystem.

How much does cve-mcp-server cost?

Free

Is cve-mcp-server free?

Yes — cve-mcp-server has a free tier. Pricing as stated on its own page: Free

Is cve-mcp-server open source?

Yes — cve-mcp-server is open source.

What does cve-mcp-server integrate with?

mcp

How popular is cve-mcp-server?

As tracked by KanonAgent: 37 upvotes (first indexed 2026-08-31).

What are the best cve-mcp-server alternatives?

Similar AI agents tracked by KanonAgent: ECC, open-design, deer-flow, Agent-Reach, ruflo, career-ops.

cve-mcp-server alternatives — similar AI agents

ECC open-design deer-flow Agent-Reach ruflo career-ops

Where this fits — browse the same shelf

AI Agent Skills & Plugins AI agents for security compliance check AI agents that work with MCP (Model Context Protocol)