INDIVIDUAL MCP TOOL

scan_dependencies

Bulk OSV scan of a whole lockfile/SBOM — every dependency checked against OSV.dev, KEV-flagged.

elsas.itnone authenticationAvailability not checked

Input schema

{}

Inferred read-only · medium confidence · heuristic, not a guarantee.

No write-capable action terms were found; this is not proof that invocation has no side effects.

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.elsas-it]
url = "https://elsas.it/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "elsas-it": {
      "type": "http",
      "url": "https://elsas.it/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: elsas-it
Remote MCP URL: https://elsas.it/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "elsas-it": {
      "url": "https://elsas.it/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "elsas-it": {
      "type": "http",
      "url": "https://elsas.it/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "elsas-it",
  "transport": "streamable-http",
  "url": "https://elsas.it/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

get_today — Today's full curated security report for the MCP / AI-agent ecosystem (PAID — $0.10 USDC, charged automatically via x402 on Base; no account needed).
get_sample_report — FREE preview — yesterday's full report, identical in format and signing to the paid `get_today`.
list_available — List available validated reports.
check_affected — Check your installed packages against recent security advisories.
get_since — Delta feed for agents that poll on their own clock: what's new since you last checked.
get_items — Full bodies for items you discovered via `get_since` (PAID — pay-per-value, priced per delivered item via x402; $0 if none of the ids are found).
check_cve — Normalized, SIGNED verdict for a single CVE: CVSS (v3.1/v4.0, authoritative from NVD with OSV fallback), CISA-KEV exploitation status, and EPSS probability.
is_exploited — Fast boolean: is this CVE known-exploited?