Cybersecurity Threat Intelligence MCP Server

CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.

Local serverstdio

What is the Cybersecurity Threat Intelligence MCP Server?

CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.

What the server does

Raw CVE counts are noise. Every vulnerability here carries its EPSS score (the probability it'll be exploited) and a CISA KEV flag (whether it's actively exploited). vulnerability_scan sorts a product's CVEs by exploit likelihood — so an agent triaging a dependency sees what actually matters first.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
search_cve$0.01
cve_detail**free**
check_ip$0.01
check_domain$0.01
vulnerability_scan$0.05
threat_feed$0.01
brief_summary$0.50
daily_brief$15
mint_info**free**

Example prompts to try

  • “Use Cybersecurity Threat Intelligence MCP to search cve.”
  • “Use Cybersecurity Threat Intelligence MCP to cve detail.”
  • “Use Cybersecurity Threat Intelligence MCP to check ip.”

Frequently asked questions

CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.