Security Intel MCP
Keyless MCP server giving AI agents CVE lookups (NVD), package-vulnerability checks (OSV) and dependency-manifest audits. No API key; free tier.
Documentation
Security Intel MCP — by Datakoot
Vulnerability intelligence for AI agents — as MCP tools your agent can call mid-task. No API keys.
Tools
| Tool | What it does | Source |
|---|---|---|
cve_lookup | CVE summary: description, CVSS score & severity, CWE, references | NVD (NIST) |
package_vulnerabilities | Known vulnerabilities for a package/version | OSV.dev |
audit_dependencies | Audit a whole package.json (or dependency list) in one call | OSV.dev |
No API keys required for any tool.
Quick start
claude mcp add --transport http security-intel https://security.datakoot.com/mcp
Or point any MCP client at https://security.datakoot.com/mcp.
Data & attribution
Vulnerability data comes from the National Vulnerability Database (NIST — US public domain) and OSV.dev (CC-BY 4.0), the same open source used by scanners like Trivy and Grype.
Part of Datakoot — keyless intelligence APIs for AI agents.