ZBS Index What actually exists in applied AI, with the source next to it

mcp server

security-intel-mcp

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Description as published by the maintainer. Source

  • version 2.0.0
  • active
  • security

active — Most recent push to the repository was 2026-08-02. Dashed tags are derived by ZBS Index from the published description, not stated by the maintainer.

What this server can do

3 functions, named and described by the server itself. Parameter names are shown because they say more about what a function does than its name usually does.

audit_dependencies(manifest, ecosystem, dependencies)
Audit a whole dependency manifest for known vulnerabilities in one call. Paste a package.json (as 'manifest'), or pass a 'dependencies' array of {name, version} objects. Returns per-package findings and a summary. Ecosystem defaults to npm.
cve_lookup(cve_id)
Look up a CVE by ID and get a compact summary: description, CVSS score & severity, vector, CWE weakness, publish date, and references. Source: NVD (NIST). Required: cve_id.
package_vulnerabilities(name, version, ecosystem)
List known vulnerabilities for a software package (optionally a specific version) via OSV. Ecosystems: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex. Required: ecosystem, name.

Last successful function declaration observed on . Source: https://security.datakoot.com/mcp. We list what the server declared; we do not call any of these functions.

Endpoint status observed on . Source: https://security.datakoot.com/mcp.

Signals

These are separate measurements of different things. They are deliberately not combined into one score, because a popularity number that mixes website traffic with saves and stars cannot be checked or acted on.

Signal Value What it measures Window Observed Source
GitHub stars 0 Number of GitHub accounts that bookmarked this repository since it was created. It is a bookmark count, not installs, not active users and not quality. cumulative, all time GitHub
Last commit 2026-08-02 Date of the most recent push to any branch. This is the strongest cheap indicator of whether the project is still maintained. point in time GitHub
Open issues 0 Open issues plus open pull requests, as GitHub counts them together. A high number can mean an active project or an abandoned one. as of fetch GitHub
Latest published version 2.0.0 Latest version string the maintainer published to the registry. as of fetch Model Context Protocol
Registry record last updated 2026-07-27 When the registry record was last updated by its maintainer. point in time Model Context Protocol
License MIT Licence GitHub detected in the repository. Detection can be wrong; the LICENSE file is authoritative. as of fetch GitHub
First listed in the MCP Registry 2026-07-27 Date this server was first published to the official MCP Registry. Not a usage or quality measure. point in time Model Context Protocol
repository status active The repository exists on GitHub and is not archived. This says nothing about how recently it was worked on. as of fetch GitHub
mcp tools declared 3 tools Number of functions the server itself declared when asked to list them. This is what the server offers an agent, not a measure of how well any of them work. as of probe security.datakoot.com
mcp endpoint status ok The server listed 3 functions when asked. as of probe security.datakoot.com

Where to get it

Related, by what their authors tagged them

  • ContrastAPI — last commit 2026-08-04, shares cve, security
    55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
  • io.github.BurtTheCoder/shodan — last commit 2026-03-31, shares cve, security
    MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
  • Compuute MCP Security Scanner — last commit 2026-07-03, shares cve, security
    Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
  • io.github.cyanheads/nist-nvd-mcp-server — last commit 2026-07-31, shares cve, security
    Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
  • TridentChain Security — last commit 2026-07-29, shares cve, security
    Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.
  • io.github.DigiCatalyst-Systems/dep-diff-mcp — last commit 2026-04-25, shares cve, security
    Translates a lockfile diff into a human-readable upgrade plan for npm and PyPI.
  • io.github.goklab/guardvibe — last commit 2026-07-23, shares cve, security
    Deterministic security layer your AI can't be. 462 rules, 39 tools, CLI + doctor + host audit.
  • Purify Security Feeds — last commit 2026-07-09, shares cve
    Query CISA KEV / EPSS vulnerability feeds with full per-record provenance and auditable versions
  • io.github.ertugrulakben/dep-oracle — last commit 2026-03-13, shares cve
    Predictive dependency security engine. Trust scores, zombie detection, blast radius analysis.
  • Cybersecurity Threat Intelligence MCP — last commit 2026-07-16, shares cve
    CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.

These share tags the maintainers applied themselves, such as cve, security. Common tags like "mcp" or "ai" are ignored for this: agreeing with six hundred other projects is not a similarity.

This is not a recommendation and not a test result. It is a map of what the authors said their work is about.

Also from datakoot

  • com.datakoot/base-intel-mcp — last commit 2026-08-02
    Read-only on-chain intel for AI agents on Base: balances, tokens, gas, tx status. No API keys.
  • com.datakoot/domain-intel-mcp — last commit 2026-08-02
    Domain & company intel for AI agents: RDAP, DNS, email deliverability, tech stack. No API keys.
  • com.datakoot/economy-intel-mcp — last commit 2026-08-02
    Macro data for AI agents: GDP, inflation, unemployment & trade, any country. No API keys.
  • com.datakoot/filings-intel-mcp — last commit 2026-08-02
    SEC EDGAR for AI agents: company filings, financials and insider trades. No API keys.
  • com.datakoot/market-intel-mcp — last commit 2026-08-02
    Live & historical FX rates for AI agents, from European Central Bank data. No API keys.
  • com.datakoot/package-intel-mcp — last commit 2026-08-02
    npm, PyPI & crates.io intel for AI agents: versions, popularity, deps, health. No API keys.
  • com.datakoot/regulatory-intel-mcp — last commit 2026-08-02
    US Federal Register for AI agents: rules, notices and executive orders. No API keys.
  • com.datakoot/weather-intel-mcp — last commit 2026-08-02
    US weather, alerts, earthquakes and elevation for AI agents, from NWS/NOAA and USGS. No API keys.

How the author describes it

Topics the maintainer set on GitHub: ai-agents, ai-tools, claude, cve, llm, mcp, mcp-server, model-context-protocol, security, vulnerabilities.

This record as data

Every field on this page, with its source and observation date, is in the catalog JSON. Fetch the whole kind at once instead of parsing this HTML.

GET /api/v1/entries/mcp_server.json

Sources

  1. datakoot/security-intel-mcp on GitHub — GitHub, observed , trust tier 3.
  2. Official MCP Registry — Model Context Protocol, observed , trust tier 1.
  3. Tools declared by the MCP server at https://security.datakoot.com/mcp — security.datakoot.com, observed , trust tier 1.