# Cve Security Cve Intelligence MCP server

Source: https://glimind.com/server/mcp-registry%2Fcom.cve-security%2Fcve-intelligence
Registry id: `mcp-registry/com.cve-security/cve-intelligence`
Status: live (checked 2026-10-27T01:41:58.496Z)

## Measurements (30 days)

- Uptime: 100%
- Checks: 4989
- Outages (90 days): 0

## Install

```json
{
  "mcpServers": {
    "cve-security-cve-intelligence-mcp-server": {
      "type": "http",
      "url": "https://cve-security.com/api/mcp"
    }
  }
}
```

Claude Code:

```sh
claude mcp add --transport http cve-security-cve-intelligence-mcp-server https://cve-security.com/api/mcp
```

## Tools (9)

- `get_chains`: Known Chained Vulnerabilities™: pairs of CVEs that a cited source reports were used together in one exploit chain (VulnCheck KEV entry text, Metasploit modules,
- `get_cve`: Full intelligence record for one CVE: per-scorer CVSS, EPSS, CISA KEV/ransomware/SSVC, four remote-detection modalities (the checks that work over the network) 
- `get_epss_movers`: CVEs whose EPSS exploitation probability rose the most recently. window is "7d" (default) or "30d". Each rise is measured between same-EPSS-model-version scores
- `get_scoreboard`: The Defender Scoreboard report (CC BY 4.0): exploited vs detectable vs patchable, every figure with its method, caveat and denominator, plus the corpus block an
- `get_sightings`: Field sightings: CVEs a named sensor network recorded in the last 7 or 30 days, most sighting days first. A field sighting is a day on which Shadowserver honeyp
- `get_updates`: The publication change stream: what this site published, stamped with OUR publish time (first_published, kev_added, detection_added, remediation_added, first_si
- `query_package`: CVEs affecting one open-source package, by purl (pkg:npm/lodash) or ecosystem + name (Maven names are group:artifact). Returns the CVE list KEV-first with each 
- `search_cves`: Search the catalog. Free text (q) and/or structured filters: vendor (slug), cwe (CWE-nnn), technique (ATT&CK id, such as T1190), year ("2024,2025"), sev ("criti
- `table1_read`: BOD 26-04 Table 1 read for up to 50 CVEs at a stated asset exposure. Per CVE this dataset supplies CISA KEV status and due date, CISA's SSVC Automatable and Tec

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.