An MCP server providing five keyless tools for AI agents to assess code security risks. It allows lookups of CVE details from the NVD, checks for known exploits in the wild via CISA KEV, scores exploit probability using FIRST EPSS, and audits package dependencies for vulnerabilities using OSV.dev data across multiple ecosystems like npm and PyPI.
- Operator: Datakoot
- Endpoint: https://security.datakoot.com/mcp
- Transport: streamable-http
- Sign-in: No sign-in
- Category: Developer tools
- Use cases: Look up CVE details and severity scores from NVD; Audit package.json for known vulnerabilities via OSV; Check if a CVE is on CISA's Known Exploited list; Get EPSS exploit probability scores for CVEs
- Tools: cve_lookup, known_exploited, epss_score, package_vulnerabilities, audit_dependencies
- Documentation: https://security.datakoot.com/
- Directory listing: https://koskamo.com/explore/security-intel-mcp
- Also known as: Security Intel MCP MCP; security-intel-mcp