vuln-triage-mcp
An MCP server that prioritizes software vulnerabilities by combining CVSS severity, exploit probability (EPSS), and known exploitation status (CISA KEV) into a single explainable priority score. It helps AI agents determine which security issues to address first based on real-world risk rather than just severity metrics.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Prioritize vulnerabilities using a combined score of CVSS, EPSS, and KEV
- Check if a specific CVE is actively exploited in the wild via CISA KEV
- Find vulnerabilities affecting a specific package and ecosystem version
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
vuln-triage-mcp 0.1.0
{
"version": "0.1.0",
"transport": "stdio",
"identifier": "vuln-triage-mcp",
"registryType": "pypi"
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"vuln-triage-mcp": {
"command": "uvx",
"args": [
"vuln-triage-mcp==0.1.0"
]
}
}
}Cline
{
"mcpServers": {
"vuln-triage-mcp": {
"command": "uvx",
"args": [
"vuln-triage-mcp==0.1.0"
]
}
}
}VS Code
{
"servers": {
"vuln-triage-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"vuln-triage-mcp==0.1.0"
]
}
}
}Claude Desktop
{
"mcpServers": {
"vuln-triage-mcp": {
"command": "uvx",
"args": [
"vuln-triage-mcp==0.1.0"
]
}
}
}Let your agent find its tools
Find servers like vuln-triage-mcp from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.