The EchelonGraph MCP server provides CVE and exposure intelligence for AI tools like Claude and Cursor. It integrates a fused CVE feed including NVD, MITRE-CNA, CISA-KEV, EPSS, and GitHub GHSA data, along with per-CVE internet-exposure footprints derived from Shodan data. The server is free, keyless, and read-only, allowing users to browse the CVE Pulse feed and check vulnerability exposure directly within their development environment.
- Operator: EchelonGraph
- Endpoint: https://mcp.echelongraph.io/mcp
- Transport: streamable-http
- Sign-in: No sign-in
- Category: Developer tools
- Use cases: Query CVE details and scores from NVD, MITRE, and CISA feeds; Check internet exposure footprint for specific CVEs using Shodan data; Integrate vulnerability intelligence directly into Claude Desktop or Cursor; Assess KEV (Known Exploited Vulnerabilities) status for software components
- Tools: cve_summary, search_cves, get_cve, cve_exposure, exposure_radar, kev_recent, epss_history, check_affected, check_sbom, cve_intel, get_cwe, vendor_advisories_for_cve, get_vendor_advisory, search_vendor_advisories
- Documentation: https://echelongraph.io/pulse/mcp
- Directory listing: https://koskamo.com/explore/echelongraph-mcp
- Also known as: EchelonGraph MCP MCP; echelongraph-mcp