This MCP server allows AI agents to triage Common Vulnerabilities and Exposures (CVEs) by determining severity, checking if they are actively exploited, and assessing the likelihood of exploitation using data from the National Vulnerability Database, CISA, and FIRST's EPSS scores. It helps developers prioritize patching efforts without scanning local systems.
- Operator: OpenKrill
- Endpoint: https://cve.openkrill.app/mcp
- Transport: streamable-http
- Sign-in: No sign-in
- Category: Developer tools
- Use cases: Triage a CVE to determine its severity level; Check if a CVE is on the CISA exploited-vulnerabilities list; Assess the likelihood of exploitation using EPSS scores; Prioritize which vulnerabilities to patch first
- Tools: check_cve, check_cves, list_recent_kev, triage_dependencies, submit_feedback, get_feedback_reply
- Documentation: https://openkrill.app/
- Directory listing: https://koskamo.com/explore/cve-risk-check-mcp
- Also known as: CVE Risk Check MCP MCP; cve-risk-check-mcp