# Openkrill Cve MCP server

Source: https://glimind.com/server/mcp-registry%2Fapp.openkrill%2Fcve
Registry id: `mcp-registry/app.openkrill/cve`
Status: live (checked 2026-10-27T03:39:09.624Z)

## Verdict

Openkrill Cve MCP server answered 98.8% of Glimind's liveness checks over 30 days, better than 7% of MCP servers, with 514 ms median handshake and 25 outages in 90 days. Its agent-readiness grade is A (94/100) across 6 tools, costing an agent about 1,718 tokens to load. Checked every few minutes; no tool is ever called.

## Measurements (30 days)

| Metric | Value | Better than |
|---|---|---|
| Uptime, 30 days | 98.8% | 7% of MCP servers |
| Median handshake latency | 514 ms | 49% of MCP servers |
| p95 handshake latency | 3185 ms | — |
| Checks in 30 days | 4,097 | — |
| Outages, 90 days | 25 | — |
| Median recovery | 6 min | — |
| Agent-readiness score | 94/100 (A) | 78% of MCP servers |
| Tools | 6 | — |
| Tool-list size for an agent | ~1,718 tokens | 55% of MCP servers |
| Days observed | 23 | — |

## Install

```json
{
  "mcpServers": {
    "openkrill-cve-mcp-server": {
      "type": "http",
      "url": "https://cve.openkrill.app/mcp"
    }
  }
}
```

Claude Code:

```sh
claude mcp add --transport http openkrill-cve-mcp-server https://cve.openkrill.app/mcp
```

## Tools (6)

- `check_cve`: Use this when the user asks how serious a CVE is, such as "how bad is CVE-2021-44228?". Pass the CVE id. Returns a priority (exploited, likely, routine or unkno
- `check_cves`: Rank several CVEs. Use this when the user has a list of CVE ids and wants to know which to deal with first, such as "which of these CVEs should I patch first?".
- `get_feedback_reply`: Read the maintainers' reply to feedback you sent with submit_feedback, given its ticket id. Returns status pending until a reply is ready, then status answered 
- `list_recent_kev`: Use this when the user asks what CISA recently added to its Known Exploited Vulnerabilities list, such as "what exploited CVEs were added this month?". Optional
- `submit_feedback`: Send feedback, a bug report or a tool request to the maintainers of the tools on this server: a missing tool, missing or stale data, or a tool that broke or gav
- `triage_dependencies`: Use this when the user wants to know which vulnerable dependencies to fix first, such as "which dependencies in this package-lock.json should I upgrade first?" 

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.