Patch MCP Server

Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment

Remote serverstreamable-httpPython

What is the Patch MCP Server?

Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment

What the server does

Ask your AI assistant about Microsoft security updates. This Python-based MCP (Model Context Protocol) server connects AI assistants like Claude, Copilot, and ChatGPT to the MSRC Security Update Guide — the authoritative source for every CVE Microsoft patches — enabling natural-language queries over Patch Tuesday releases: CVEs, KB articles, severity ratings, CVSS scores, affected products, and exploited-in-the-wild status.

  • Get the monthly rollup — - "What did this month's Patch Tuesday fix?"
  • Find what's actively exploited — - "Which vulnerabilities are being exploited in the wild?"
  • Look up any CVE — - "Tell me about CVE-2026-41108" (KBs, affected products, CVSS, description)
  • Map KBs to CVEs — - "Which vulnerabilities does KB5094123 fix?"
  • Filter by product — - "What Critical CVEs affect Windows Server 2022 this month?"
  • Track zero-days — - "Were any publicly disclosed vulnerabilities patched in April?"

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

How to install the Patch MCP Server

{
  "mcpServers": {
    "patch-tuesday": {
      "command": "uvx",
      "args": ["patch-tuesday-mcp"]
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

VariableDescriptionRequired
MSRC_PROFILES_PATHFilesystem location the server is allowed to use.Optional

Example prompts to try

  • “Use Patch to General.”

Frequently asked questions

Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.