An MCP (Model Context Protocol) server that gives AI assistants access to the [Exploit Intelligence Platform](https://exploit-intel.com) —
An MCP (Model Context Protocol) server that gives AI assistants access to the Exploit Intelligence Platform — vulnerability and exploit
python3 --version or python --version) - pip (comes with Python on most systems) - An MCP-compatible AI client (Cursor IDE, Claude Desktop, etc.) Base installation is enough for stdio clients. If you want to run the standalone Streamable HTTP server, install the optional HTTP extra: ```bash pip install "eip-mcp[http]"Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| search_vulnerabilities | Search CVEs with full-text query and filters: severity, vendor, product, ecosystem, CWE, CVSS/EPSS thresholds, KEV, Nuclei, year, date range. Supports explicit score mode via score_version + min_score + sort=score_desc. |
| get_vulnerability | Full intelligence brief for a CVE or EIP-ID. **Includes ranked exploits** (AI analysis, MITRE techniques, source URLs), products, Nuclei templates (with description/impact/remediation), references. |
| search_exploits | Browse exploits with **structured filters only** (no free-text query): source, language, LLM classification, author, stars, CVE, vendor, product, attack_type, complexity, reliability, requires_auth. |
| get_exploit_code | Retrieve exploit source code by platform ID (auto-selects main file) |
| get_exploit_analysis | Full AI analysis for a single exploit: classification, attack type, complexity, reliability, MITRE ATT&CK, summary, and trojan/deception indicators |
| get_nuclei_templates | Nuclei scanner templates with description, impact, remediation, and Shodan/FOFA/Google dork queries |
| list_authors | Top exploit researchers ranked by exploit count |
| get_author | Author profile with all their exploits and CVE context |
| list_cwes | CWE categories ranked by vulnerability count |
| get_cwe | CWE detail with description, exploit likelihood, parent hierarchy |
| list_vendors | Software vendors ranked by vulnerability count |
| list_products | Discover exact product names for a vendor (CPE name lookup with vuln counts) |
| lookup_alt_id | Resolve alternate IDs (EDB-XXXXX, GHSA-XXXXX) to their CVE |
| audit_stack | Audit a tech stack for critical/high severity CVEs with exploits, sorted by EPSS risk |
{
"mcpServers": {
"eip": {
"command": "eip-mcp"
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
python3 --version or python --version) - pip (comes with Python on most systems) - An MCP-compatible AI client (Cursor IDE, Claude Desktop, etc.) Base installation is enough for stdio clients. If you want to run the standalone Streamable HTTP server, install the optional HTTP extra: ```bash pip install "eip-mcp[http]"Queries the NIST National Vulnerability Database (NVD) via its API.
Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.
Use Infisical MCP to work with secrets, projects, environments and folders through Infisical’s documented machine-identity or access-token authentication.
MCP server for the ESET ecosystem - Connect cloud + PROTECT On-Prem, multi-tenant, RO/RW
Before an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks.
MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis