vulnerability-management MCP servers & tools

22 Model Context Protocol servers tagged “vulnerability-management”, ranked by usage. Connect any of them to Claude Desktop, Cursor or Windsurf in one step.

Search “vulnerability-management” with filters

MCP Shodan
BurtTheCoder
MCP server for querying the Shodan API and Shodan CVEDB. This server provides tools for IP lookups, device searches, DNS lookups, vulnerability queries, CPE lookups, and more.
Security
Upvotes: 0Installs: 0GitHub stars: 174
AynOps
AynOps is a reconnaissance focused MCP Server which gives reconnaissance capabilities to AI Clients
Security
Upvotes: 0Installs: 0GitHub stars: 28
Cve Search MCP
roadwy
A Model Context Protocol (MCP) server for querying the CVE-Search API. This server provides comprehensive access to CVE-Search, browse vendor and product、get CVE per CVE-ID、get the last updated CVEs.
Security
Upvotes: 0Installs: 0GitHub stars: 107
Attestd MCP
CVE and supply chain checks for MCP clients. Covers infrastructure, PyPI, and npm packages.
Security
Upvotes: 0Installs: 0GitHub stars: —
Epss
FIRST.org EPSS (Exploit Prediction Scoring System) MCP.
Security
Upvotes: 0Installs: 0GitHub stars: —
Intruder MCP
intruder-io
MCP server to access Intruder, helping you identify, understand, and fix security vulnerabilities in your infrastructure.
Security
Upvotes: 0Installs: 0GitHub stars: 26
Niro
AI pentester for PRs — finds exploitable bugs and hands your coding agent the fix.
Security
Upvotes: 0Installs: 0GitHub stars: 10
EchelonGraph CVE & Exposure
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
Security
Upvotes: 0Installs: 0GitHub stars: 7
Nist Nvd MCP Server
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Security
Upvotes: 0Installs: 0GitHub stars: 1
Cisa Cybersecurity MCP Server
CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.
Security
Upvotes: 0Installs: 0GitHub stars: 1
Z
ZEN SecDB
ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.
Security
Upvotes: 0Installs: 0GitHub stars: —
C
Cve Intelligence
CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions. All tools keyless.
Security
Upvotes: 0Installs: 0GitHub stars: —
A
AIS CVE Priorities — daily exploit Ranked patch list for AI agents
Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
Security
Upvotes: 0Installs: 0GitHub stars: —
S
Strix
AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets.
Security
Upvotes: 0Installs: 0GitHub stars: —
Dlp MCP
The DLP MCP provides the compliance violation in the one drive, google drive documents.
Security
Upvotes: 0Installs: 0GitHub stars: —
Endoflife.ai — Software Lifecycle Intelligence
EOL dates and risk scores for 480+ software products. Check versions, score risk, audit stacks.
Developer Tools
Upvotes: 0Installs: 0GitHub stars: —
PostgreSQL CVE & Release Intelligence
PostgreSQL security for AI agents: CVEs, yanked releases, exploits, and upgrade paths
Security
Upvotes: 0Installs: 0GitHub stars: —
Qualys MCP
Full Qualys portal management over MCP: VMDR, PC, WAS, Cloud Agent, Container Security & more
Security
Upvotes: 0Installs: 0GitHub stars: —
Trusteed
CTEM for your Trusteed tenant: security summary, findings, compliance gaps, and scans via OAuth.
Security
Upvotes: 0Installs: 0GitHub stars: —
Security Intel
Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.
Finance & Fintech
Upvotes: 0Installs: 0GitHub stars: —
Xfa
Connect AI assistants to your XFA device-security data over MCP.
Security
Upvotes: 0Installs: 0GitHub stars: —
PG1 Sovereign Threat Intelligence
STIX 2.1 threat indicator feed: IPs, domains, URLs, file hashes from ThreatFox, OTX, NVD.
Security
Upvotes: 0Installs: 0GitHub stars: —