Cybersecurity Threat Intelligence MCP Server

CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.

Local serverstdio

What is the Cybersecurity Threat Intelligence MCP Server?

CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.

What the server does

Raw CVE counts are noise. Every vulnerability here carries its EPSS score (the probability it'll be exploited) and a CISA KEV flag (whether it's actively exploited). vulnerability_scan sorts a product's CVEs by exploit likelihood — so an agent triaging a dependency sees what actually matters first.

Available tools

The toolset is worth reading before you wire it up, because it tells you what the integration is really for:

  • search_cve — $0.01
  • cve_detail — free
  • check_ip — $0.01
  • check_domain — $0.01
  • vulnerability_scan — $0.05
  • threat_feed — $0.01
  • brief_summary — $0.50
  • daily_brief — $15
  • mint_info — free

Installation

Setup follows the usual MCP pattern — install or clone the server, register it in your client's configuration file, restart the client. The configuration blocks on this page cover the common clients.

Where it fits

Plenty of database access servers cover similar ground. The differences that matter in practice are scope of access and how much setup stands between you and a working tool call. Cybersecurity Threat Intelligence MCP's toolset — search_cve, cve_detail, check_ip and 6 more — is a fair guide to whether it matches your workflow. It is maintained by FoundryNet; worth a glance at recent repository activity before you build anything load-bearing on it.

Worth knowing first

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

Recorded tools

  • search_cve — $0.01
  • cve_detail — free
  • check_ip — $0.01
  • check_domain — $0.01
  • vulnerability_scan — $0.05
  • threat_feed — $0.01
  • brief_summary — $0.50
  • daily_brief — $15
  • mint_info — free

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
search_cve$0.01
cve_detail**free**
check_ip$0.01
check_domain$0.01
vulnerability_scan$0.05
threat_feed$0.01
brief_summary$0.50
daily_brief$15
mint_info**free**

How to install the Cybersecurity Threat Intelligence MCP Server

```json
{ "mcpServers": { "cyber-intel": { "url": "https://cyber-intel-mcp-production.up.railway.app/mcp" } } }

Configuration as documented by the project. Restart the client after saving.

Example prompts to try

  • “Use Cybersecurity Threat Intelligence MCP to search cve.”
  • “Use Cybersecurity Threat Intelligence MCP to cve detail.”
  • “Use Cybersecurity Threat Intelligence MCP to check ip.”

Frequently asked questions

CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.