Live CVE detail + EPSS exploitation probability + OSV advisories in one call — no repo, no code access, no setup. SBOM vulnerability scanning and licence compliance across any package ecosystem.…
datanexusmcp-mcp is an MCP project maintained in the datanexusmcp/mcp-server repository. The maintainer describes its purpose as “Live CVE detail + EPSS exploitation probability + OSV advisories in one call — no repo, no code access, no setup. SBOM vulnerability scanning and…”. Read the project documentation for the complete scope.
The maintainer’s configuration uses https://datanexusmcp.com/mcp. It declares streamable-http transport. Check the project’s account and authentication instructions when adding the endpoint to your client.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| apikeys_generate_api_key | Generate a free dnx_... API key tied to your email. Rate-limited 3/IP/day. Returns key once — store it immediately |
| apikeys_rotate_api_key | Revoke current key and issue a replacement in one atomic operation |
| apikeys_revoke_api_key | Permanently revoke an API key and invalidate its Redis cache entry |
| security_fetch_package_vulnerabilities | CVE list for any npm/PyPI/Go/Maven/Cargo package at a specific version. Batch up to 50 packages |
| security_fetch_package_licence | SPDX licence identifier for any package version |
| security_fetch_dependency_graph | Full transitive dependency tree with CVE-flagged transitive deps highlighted via OSV cross-check. Hard timeout 8s |
| security_audit_sbom_vulnerabilities | Audit a CycloneDX or SPDX SBOM JSON against OSV.dev. CVEs grouped by package with severity |
| security_fetch_cve_detail | Full CVE record — CVSS score, description, affected products, patch references |
| security_fetch_cisa_kev | Check whether a CVE is in the CISA Known Exploited Vulnerabilities catalog |
| security_fetch_cve_epss | EPSS exploit probability (0.0–1.0) for a CVE. >0.7 = patch immediately |
| security_fetch_package_risk_brief | Single-call SHIP/CAUTION/BLOCK verdict combining CVEs, licence risk, maintainer health, and transitive count |
| security_fetch_package_maintainer_history | Maintainer ownership timeline and anomaly score. Flags sudden ownership transfers |
| security_detect_typosquatting | DL-distance ≤ 2 against top-10,000 packages. Returns SUSPICIOUS/CLEAN verdict |
| security_fetch_cve_watch | Persistent CVE watchlist — create once, check anytime for patch releases, KEV listings, PoC publications |
| security_audit_sbom_continuous | Register a CycloneDX/SPDX SBOM once, check anytime for new CVEs |
| security_fetch_licence_analysis | Plain-English licence explainer. Risk level, obligations, permissions for any SPDX ID. Static bundle covers top-50 |
| security_audit_licence_compatibility | COMPATIBLE/CONFLICT audit for up to 50 packages or SPDX IDs. Specific conflicting pairs with remediation |
| security_fetch_cve_risk_summary | One-call CVE verdict: CRITICAL_EXPLOIT/HIGH_RISK/MODERATE/LOW/UNKNOWN. Aggregates CVSS + KEV + EPSS in parallel |
| security_audit_sbom_license_policy | Audit a CycloneDX/SPDX SBOM against a custom SPDX licence policy. Returns PASS/WARN/BLOCK per package. Default policy blocks GPL-3.0/AGPL-3.0. Unlisted… |
| security_fetch_cve_watch_status | Polling inbox for all active CVE watches. Returns only watches with new events since last poll using per-user cursor. First call returns last 30 days |
| frontend_security_detect_typosquatting | Typosquatting detection against the top-500 frontend packages (React, Vite, Axios, Lodash, etc.). DL-distance ≤ 2. Fewer false positives than the full-npm scan |
| frontend_security_audit_manifest | Audit a package.json for supply-chain risk. Returns SHIP/CAUTION/BLOCK verdict with CVE counts, licence risks, and abandoned packages. Accepts optional… |
| frontend_security_audit_ci_pipeline | Scan GitHub Actions, Vercel, or Netlify configs for exposed secrets, unpinned actions, missing lockfile enforcement, and overly broad permissions. ${{… |
| frontend_security_fetch_package_risk_brief | npm-scoped SHIP/CAUTION/BLOCK risk brief with frontend-specific signals: weekly_downloads and is_ui_component (detects react-, @mui/, @radix-ui/, etc.) |
| nonprofit_fetch_nonprofit_by_ein | Full IRS 990 filing data for any US nonprofit — revenue, expenses, executive compensation, risk flags |
| nonprofit_search_nonprofits_by_name | Search US nonprofits by name and optional state filter |
| nonprofit_fetch_charity_uk | UK registered charity details — income, trustees, activities |
| nonprofit_fetch_nonprofit_full_profile | Complete due diligence in one call — financials, exec pay, risk flags, health score (0–100), programme ratio, fundraising sustainability |
| nonprofit_search_nonprofits_by_category | Search by mission category (education, healthcare, arts, environment, human_services, civil_rights, international, religion, science, sports) or raw NTEE code |
| nonprofit_fetch_nonprofit_financial_trends | 5-year (up to 10-year) revenue, expense, and asset trends with CAGR and health score history |
| compliance_check_sam_exclusion | Check if an entity is excluded from US federal contracts (debarred) on SAM.gov |
| compliance_fetch_npi_provider | NPI provider details — name, specialty, address, taxonomy codes |
| compliance_search_npi_by_name | Search NPI registry by provider name and state |
| compliance_fetch_finra_broker | FINRA BrokerCheck registration, disclosures, and exam history |
| domain_fetch_dns_records | A, AAAA, MX, TXT, NS, CNAME records for any domain |
| domain_check_email_security | SPF, DMARC, and DKIM validation — misconfiguration flags, A–F grade |
| domain_fetch_domain_rdap | Domain registration details — registrar, registrant, creation date |
| domain_fetch_reverse_ip | All domains co-hosted on the same IP address |
| domain_fetch_subdomains | Enumerate subdomains via certificate transparency logs |
| domain_fetch_ssl_certificate_chain | Full SSL certificate chain — issuer, expiry, SANs |
| domain_fetch_domain_history | Historical SSL certificate issuance timeline |
| legal_fetch_patent_by_number | Full patent record — claims, abstract, filing date, assignees, IPC classifications |
| legal_search_patents_by_keyword | Patent search across EPO, USPTO, and WIPO by keyword or phrase |
| legal_fetch_inventor_portfolio | All patents by a named inventor — portfolio size, filing dates, assignees |
| legal_fetch_patent_citations | Forward and backward citation chains for a patent |
| govcon_fetch_vendor_contract_history | Federal contract award history for any vendor |
| govcon_search_contract_awards | Search contract awards by keyword, agency, or PSC code |
| govcon_fetch_open_solicitations | Open contract opportunities currently accepting bids |
| regulatory_search_open_rulemakings | Open rulemaking proceedings on Regulations.gov by keyword or agency |
| regulatory_fetch_docket_details | Full docket record — comments, documents, status |
| regulatory_fetch_federal_register_notices | Recent Federal Register notices and rules by agency or keyword |
| search_datanexus_tools | Find the right DataNexus tool for your task by keyword |
| report_feedback | Report data quality issues or gaps |
| report_mcpize_link | Returns subscription and payment tier status |
| validate_tool_output | Validate a tool response for anomalies or schema issues |
{
"mcpServers": {
"datanexus": {
"type": "http",
"url": "https://datanexusmcp.com/mcp"
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
Provides standardized access to Swiss court decisions via the entscheidsuche.ch API, enabling LLMs to search, retrieve, and analyze legal documents.
x402 payment safety for AI agents: counterparty risk gate, payment firewall, compliance, RWA gate.
Nonprofit compliance rules for all 50 US states, each with its official citation and status
A2A Governance Bridge MCP server. Tools: verify agent compliance, authorize a2a transaction,...
This MCP server gives Claude Code native access to: - Live drift scores across 11 major models (GPT-4o, Claude, Gemini, DeepSeek) - 9-score behavioral scorecards (drift, coherence, entropy…
View on ApifyForge | Use on Apify Store