CISA Kev
Use this MCP server to CISA Known Exploited Vulnerabilities catalog search. Tools include search...
Runs on your machine from its package; the steps are below.
What it does
- Reads
- Writes
- High impact
At most: only reads or looks up information.
What it costs
FreeOdel charges nothing per call. The publisher may charge for its own service.
Runs locally over stdio
This server isn't hosted — your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).
Run
npx -y cisa-kev-mcp
MCP client config
{
"mcpServers": {
"cisa-kev": {
"command": "npx",
"args": [
"-y",
"cisa-kev-mcp"
]
}
}
}cisa-kev-mcp
Search CISA's Known Exploited Vulnerabilities catalog. This is a focused companion to vulnerability scanners: it helps an agent identify vulnerabilities that CISA has marked as exploited in the wild.
Tools
search_known_exploited: search CVE, vendor, product, vulnerability name, and description fields.recent_known_exploited: list recently added catalog entries.catalog_info: inspect catalog version, release date, and entry count.
The feed is public and keyless. Catalog inclusion is a prioritization signal, not a complete risk assessment or a guarantee that a system is vulnerable.
Run
npm install
npm run build
node dist/index.js
