此 MCP 可以做什么
Looks up CVEs and exploitability signals and audits software dependency manifests for known vulnerabilities.
工具
输入模式
{'type': 'object', 'required': [], 'properties': {'manifest': {'type': 'string', 'description': 'Raw package.json contents'}, 'ecosystem': {'type': 'string', 'description': 'Default npm'}, 'dependencies': {'type': 'array', 'items': {'type': 'object'}, 'description': '[{name, version}] entries'}}}
输入模式
{'type': 'object', 'required': ['cve_id'], 'properties': {'cve_id': {'type': 'string', 'description': 'e.g. CVE-2021-44228'}}}
输入模式
{'type': 'object', 'required': [], 'properties': {'cve_id': {'type': 'string', 'description': 'A single CVE id.'}, 'cve_ids': {'type': 'array', 'items': {'type': 'string'}, 'description': 'Multiple CVE ids (or pass a comma-separated string).'}}}
输入模式
{'type': 'object', 'required': [], 'properties': {'limit': {'type': 'number', 'description': 'When listing, how many newest entries to return (default 20, max 100).'}, 'cve_id': {'type': 'string', 'description': 'Optional. Check a single CVE, e.g. CVE-2021-44228.'}, 'vendor': {'type': 'string', 'description': 'Optional. Filter by vendor or product name substring.'}, 'ransomware_only': {'type': 'boolean', 'description': 'Optional. Only vulns CISA links to known ransomware campaigns.'}}}
输入模式
{'type': 'object', 'required': ['ecosystem', 'name'], 'properties': {'name': {'type': 'string', 'description': 'Exact package name as published in that registry, e.g. lodash for npm, requests for pypi.'}, 'version': {'type': 'string', 'description': 'Optional; if given, only vulns affecting that version are returned'}, 'ecosystem': {'type': 'string', 'description': 'Package registry to look in. One of: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex.'}}}
近期工具变更
类似的 MCP 服务器
hyperion
Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…
Vee3
Manages Clerk authentication infrastructure, including users, organizations, domains, sessions, tokens, OAuth, SSO, machines, per…
IA-QA — 130+ QA & Dev Tools for AI Agents
Provides deterministic QA, evaluation, testing, code analysis, prompt and RAG checks, model comparison, and web security diagnost…
validoria-mcp
Runs continuous website, API, and webshop tests covering security, SEO, performance, accessibility, browser journeys, and inciden…
HubVibe: Pay-per-Call Tools for AI Agents: Web Search, Email Verify, KYC, Stocks, Crypto, News, Data
Offers paid utilities for web audits, HTTP fetching and extraction, BigQuery analysis, LLM processing, code execution, blockchain…
developer-tools
Provides general-purpose developer utilities for encoding, hashing, encryption, JSON, HTML, CSS, networking, and related data tra…
Qiniso
Provides deterministic formatting, parsing, holiday and tax lookups, address handling, and checksum or structure validation for i…
ContrastAPI
Provides security research and assessment tools covering CVEs, IOCs, dependencies, secrets, injection risks, HTTP headers, domain…