EchelonGraph MCP

The EchelonGraph MCP server provides CVE and exposure intelligence for AI tools like Claude and Cursor. It integrates feeds from NVD, MITRE-CNA, CISA-KEV, EPSS, and GitHub GHSA, along with per-CVE internet exposure footprints derived from Shodan data. The server offers read-only tools for querying vulnerability records, checking exploit status, and performing SBOM checks without requiring authentication.

Visit EchelonGraph

Package and access

Local package with source-attributed installation metadata. Koskamo does not execute packages during review.

Vendor evidenceLocal stdioSource reviewed; not executedOperated by EchelonGraph

You need:Free and keyless: no API key, no auth, read-only.It runs via npx and needs Node.js 20 or later — no global install.

Vendor documentation

What you can do with it

Query CVE records and severity scores
Check CISA KEV exploited status and EPSS history
Perform SBOM and lockfile vulnerability checks
Retrieve per-CVE internet exposure data from Shodan

Source and maintenance

Vendor evidenceRegistry 3.1.2

mcp-registry: io.echelongraph/echelongraph-mcp@3.1.2 Source repository Project website

Maintenance checked: Oct 31, 2026, 10:59 PM UTC

Packages and installation

Source-provided package data. Koskamo has not executed or live-probed this package.

echelongraph-mcp 3.1.2

npm

echelongraph-mcp package definition

{
  "version": "3.1.2",
  "transport": "stdio",
  "identifier": "echelongraph-mcp",
  "registryType": "npm",
  "environmentVariables": [
    {
      "name": "ECHELONGRAPH_API_BASE",
      "format": "string",
      "default": "https://app.echelongraph.io",
      "description": "Override the API base URL (self-host or proxy)."
    },
    {
      "name": "ECHELONGRAPH_API_TIMEOUT_MS",
      "format": "number",
      "default": "15000",
      "description": "Per-request timeout in milliseconds. A slower answer is reported as a failed lookup, not as empty data."
    }
  ]
}

Tools

Reported by the attributed source; not independently observed by Koskamo.

No tool definitions available.

Connect from your client

Each snippet configures the same source-provided package; replace placeholders before use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Cursor

Merge this local stdio configuration, replace every placeholder environment value, and restart Cursor. Koskamo has not executed this package.

Cursor configuration

{
  "mcpServers": {
    "echelongraph-mcp-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "echelongraph-mcp@3.1.2"
      ],
      "env": {
        "ECHELONGRAPH_API_BASE": "<YOUR_ECHELONGRAPH_API_BASE>",
        "ECHELONGRAPH_API_TIMEOUT_MS": "<YOUR_ECHELONGRAPH_API_TIMEOUT_MS>"
      }
    }
  }
}

Cline

Merge this local stdio configuration, replace every placeholder environment value, and restart Cline. Koskamo has not executed this package.

Cline configuration

{
  "mcpServers": {
    "echelongraph-mcp-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "echelongraph-mcp@3.1.2"
      ],
      "env": {
        "ECHELONGRAPH_API_BASE": "<YOUR_ECHELONGRAPH_API_BASE>",
        "ECHELONGRAPH_API_TIMEOUT_MS": "<YOUR_ECHELONGRAPH_API_TIMEOUT_MS>"
      }
    }
  }
}

VS Code

Merge this local stdio configuration, replace every placeholder environment value, and restart VS Code. Koskamo has not executed this package.

VS Code configuration

{
  "servers": {
    "echelongraph-mcp-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "echelongraph-mcp@3.1.2"
      ],
      "env": {
        "ECHELONGRAPH_API_BASE": "<YOUR_ECHELONGRAPH_API_BASE>",
        "ECHELONGRAPH_API_TIMEOUT_MS": "<YOUR_ECHELONGRAPH_API_TIMEOUT_MS>"
      }
    }
  }
}

Claude Desktop

Merge this local stdio configuration, replace every placeholder environment value, and restart Claude Desktop. Koskamo has not executed this package.

Claude Desktop configuration

{
  "mcpServers": {
    "echelongraph-mcp-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "echelongraph-mcp@3.1.2"
      ],
      "env": {
        "ECHELONGRAPH_API_BASE": "<YOUR_ECHELONGRAPH_API_BASE>",
        "ECHELONGRAPH_API_TIMEOUT_MS": "<YOUR_ECHELONGRAPH_API_TIMEOUT_MS>"
      }
    }
  }
}

Let your agent find its tools

Find servers like EchelonGraph MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows

See all 4,405