Vulnerability management MCP servers

A server here known vulnerabilities (CVEs), security advisories or vulnerable dependencies.

Not here: general code review and uptime monitoring.

405servers
185 remote220 localTagged by Odel's AI, which can make mistakes

Best fit

279 made for this, ranked by starsRemoteLocal
  1. Tech Risk @rezearcher/tech-riskx402 MCP for agents: crypto prices, funding, DeFi yields, Polymarket, Base RPC + MCP security.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. KernelScan @kernelscan/kernelscanLinux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. AgentSec MCP @traveljamboree/agentsec-mcpSecurity intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  4. Fillin @artchristech/fillinSearch for AI agents. Closes the LLM-cutoff gap: CVEs, papers, frontier AI, prediction markets.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. Opzyai Pro @opzyai/proDeep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  6. Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database @exploit-intel/eip-mcpReal-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  7. DataNexus MCP @datanexusmcp/mcp-serverPublic data intelligence for AI agents — CVE, compliance, patents, contracts, domains.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. ZEN SecDB @nttzen/zen-secdbZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  9. Dynamic Feed @dynamicfeed/dynamic-feed94 keyless tools of live, verifiable data for AI: weather, hazards, space, CVEs. Ed25519-signed.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.