streamable-httpMITupdated 24d ago
Vulnerability intelligence for AI agents — as MCP tools your agent can call mid-task. No API keys.
What can you do with security intel mcp?
Security Intel MCP — by Datakoot
Vulnerability intelligence for AI agents — as MCP tools your agent can call mid-task. No API keys.
Tools
| Tool | What it does | Source |
|---|---|---|
cve_lookup |
CVE summary: description, CVSS score & severity, CWE, references | NVD (NIST) |
package_vulnerabilities |
Known vulnerabilities for a package/version | OSV.dev |
audit_dependencies |
Audit a whole package.json (or dependency list) in one call | OSV.dev |
No API keys required for any tool.
Quick start
claude mcp add --transport http security-intel https://security.datakoot.com/mcp
Or point any MCP client at https://security.datakoot.com/mcp.
Data & attribution
Vulnerability data comes from the National Vulnerability Database (NIST — US public domain) and OSV.dev (CC-BY 4.0), the same open source used by scanners like Trivy and Grype.
Part of Datakoot — keyless intelligence APIs for AI agents.
Install
Add security intel mcp to your client. Pick the one you use.
claude mcp add --transport http security-intel-mcp https://security.datakoot.com/mcpcodex mcp add security-intel-mcp --url https://security.datakoot.com/mcp{
"mcpServers": {
"security-intel-mcp": {
"url": "https://security.datakoot.com/mcp"
}
}
}Add to `~/.cursor/mcp.json`, or `.cursor/mcp.json` for a single project.
{
"servers": {
"security-intel-mcp": {
"type": "http",
"url": "https://security.datakoot.com/mcp"
}
}
}Add to `.vscode/mcp.json` in your workspace.
{
"mcpServers": {
"security-intel-mcp": {
"url": "https://security.datakoot.com/mcp"
}
}
}Add to `claude_desktop_config.json`, then restart Claude Desktop.
{
"mcpServers": {
"security-intel-mcp": {
"serverUrl": "https://security.datakoot.com/mcp"
}
}
}Add to `~/.codeium/windsurf/mcp_config.json`.
3 tools
security intel mcp exposes 3 tools to a connected agent.
- cve_lookup
- CVE summary: description, CVSS score & severity, CWE, references
- package_vulnerabilities
- Known vulnerabilities for a package/version
- audit_dependencies
- Audit a whole package.json (or dependency list) in one call
Score
65 / 100
Good
- Documentation14/25
- Maintenance19/25
- Trust16/20
- Capability4/15
- Install experience12/15
- Documents what it does and how to connect
- Has a resolvable package or endpoint
- Exposes at least one tool, prompt or resource
- README has substantive content
- Includes a code example
- Documents its configuration
- Mentions credentials or security posture
- Last commit 16 days ago
- Has a release history
- Repository is not archived
- Licensed MIT
- Namespace verified in the official MCP registry
- Claimed by its owner
- Published under an organisation
- 3 tool(s) documented
- Provides prompt templates
- Provides resources
- 6 documented install method(s)
- Published to a package registry
- Offers a hosted endpoint — no local install
Version history
| Versions | Published |
|---|---|
| 2.0.0Latest | Jul 27, 2026 |