Datakoot Security Intel retrieves CVE details and package vulnerability information from NVD and OSV through a keyless hosted MCP endpoint.
Datakoot Security Intel retrieves CVE details and package vulnerability information from NVD and OSV through a keyless hosted MCP endpoint.
The server exposes CVE lookup, package-version vulnerability search and dependency-list auditing. Its documented data sources are NVD for CVE details and OSV for package vulnerabilities. Results can support investigation of a dependency alert without asking an assistant to recall a vulnerability record from memory.
The registry manifest and README identify a Streamable HTTP endpoint and state that no API key is needed. The service is operated by Datakoot; it is an integration with the upstream datasets rather than an NVD-operated MCP server.
Use the exact package ecosystem, name and installed version when investigating an advisory. Compare affected ranges and references with the dependency actually deployed, including transitive dependencies. A CVE severity score does not by itself describe exposure in your application. Keep the returned advisory and dependency evidence alongside the change that addresses it, and check the upstream record when making a remediation decision.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| cve_lookup | CVE summary: description, CVSS score & severity, CWE, references |
| package_vulnerabilities | Known vulnerabilities for a package/version |
| audit_dependencies | Audit a whole package.json (or dependency list) in one call |
{
"mcpServers": {
"security-intel": {
"url": "https://security.datakoot.com/mcp"
}
}
}A Streamable HTTP MCP client and accurate package or CVE identifiers.
Queries the NIST National Vulnerability Database (NVD) via its API.
Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.
Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
Remote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.
A comprehensive Model Context Protocol (MCP) server for ABP.IO framework with 48+ tools for application development, UI generation, and management