INDIVIDUAL MCP TOOL

get_updates

The publication change stream: what this site published, stamped with OUR publish time (first_published, kev_added, detection_added, remediation_added).

cve-security.comnone authenticationAvailability not checked

LIVE ENDPOINT

https://cve-security.com/api/mcp

No auth detected

Connect to this endpoint to inspect the live schema for get_updates and invoke it with your own arguments.

Indexed input schema

{}

Risk classification

Potential side effects detected · medium confidence · heuristic, not a guarantee.

A tool name or description contains a write-action term.

Parent server

cve-security.com

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.cve-security]
url = "https://cve-security.com/api/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "cve-security": {
      "type": "http",
      "url": "https://cve-security.com/api/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: cve-security
Remote MCP URL: https://cve-security.com/api/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "cve-security": {
      "url": "https://cve-security.com/api/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "cve-security": {
      "type": "http",
      "url": "https://cve-security.com/api/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "cve-security",
  "transport": "streamable-http",
  "url": "https://cve-security.com/api/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

Related tools

get_cve — Full intelligence record for one CVE: per-scorer CVSS, EPSS, CISA KEV/ransomware/SSVC, four remote-detection modalities plus the Sigma log-detection layer, per-product fixed versions (fixed = first patched build; affected_through = the last vulnerable build, so upgrade past it), news/community coverage, intelligence summary.
search_cves — Search the catalog.
query_package — CVEs affecting one open-source package, by purl (pkg:npm/lodash) or ecosystem + name (Maven names are group:artifact).
get_scoreboard — The Defender Scoreboard report (CC BY 4.0): exploited vs detectable vs patchable, every figure with its method, caveat and denominator, plus the corpus block and any method-change notes.
get_epss_movers — CVEs whose EPSS exploitation probability rose the most recently.