overflo.ws MCP

Public, read-only CVE tools over the Model Context Protocol: search CVEs, look up vendors and products, get CISA KEV exploitation status and EPSS scores, and check an open-source package for vulnerabilities and malicious releases in one call.

View on overflo.ws

Hosted MCP Server

npx add-mcp 'https://mcp.overflo.ws/mcp'

Installs into Claude Code, Codex, Cursor and more

Documentation

Connect your assistant to overflo.ws

Public, read-only CVE tools over the Model Context Protocol: search CVEs, look up vendors and products, get CISA KEV exploitation status and EPSS scores, and check an open-source package for vulnerabilities and malicious releases in one call. Streamable HTTP endpoint: https://mcp.overflo.ws/mcp. No sign-in, API key or headers needed.

Claude Code

claude mcp add --transport http overflows https://mcp.overflo.ws/mcp

Run /mcp to check the connection. Claude Code docs.

Claude Desktop and claude.ai

Open Settings -> Customize -> Connectors -> Add -> Add Custom Connector. Name it overflows, enter https://mcp.overflo.ws/mcp and choose No sign in under Authentication. Leave request headers empty, add it, then enable it in your chat. Claude connector docs.

Cursor

Add to .cursor/mcp.json in your project (or ~/.cursor/mcp.json globally), then restart Cursor:

{
  "mcpServers": {
    "overflows": { "url": "https://mcp.overflo.ws/mcp" }
  }
}

Cursor docs.

VS Code

Add to .vscode/mcp.json, then start the server with the editor's Start action:

{
  "servers": {
    "overflows": { "type": "http", "url": "https://mcp.overflo.ws/mcp" }
  }
}

VS Code docs.

Try it

“Find the CPE name for Windows Server, then show its recent known-exploited CVEs.”

“Is anything known against tensorlake 0.5.144 on npm?”

Tools: search_cves, get_cve, find_product, get_vendor, cve_highlights, find_package, check_package. Up to 200 requests per 10 minutes from one address.