The Model Context Protocol (MCP) server provides CVE lookups using NVD (National Vulnerability Database) and dependency-manifest audits using OSV (Open Source Vulnerability). It is designed for AI agents, and it operates without requiring API keys, based on the provided server description.

🛠️ Key Features

CVE lookups via NVD
Dependency-manifest audits via OSV
No API keys required

🚀 Use Cases

Checking known vulnerabilities for CVEs from NVD
Auditing dependency manifests against OSV findings for AI agent workflows

⚡ Developer Benefits

Integrates vulnerability lookup and manifest auditing for AI agents
Avoids API-key setup for the listed functions

⚠️ Limitations

Only CVE lookups (NVD) and dependency-manifest audits (OSV) are described; other capabilities are not specified

Security Intel MCP — by Datakoot

Vulnerability intelligence for AI agents — as MCP tools your agent can call mid-task. No API keys.

Tools

Tool	What it does	Source
`cve_lookup`	CVE summary: description, CVSS score & severity, CWE, references	NVD (NIST)
`package_vulnerabilities`	Known vulnerabilities for a package/version	OSV.dev
`audit_dependencies`	Audit a whole package.json (or dependency list) in one call	OSV.dev

No API keys required for any tool.

Quick start

code

claude mcp add --transport http security-intel https://security.datakoot.com/mcp

Or point any MCP client at https://security.datakoot.com/mcp.

Data & attribution

Vulnerability data comes from the National Vulnerability Database (NIST — US public domain) and OSV.dev (CC-BY 4.0), the same open source used by scanners like Trivy and Grype.

Part of Datakoot — keyless intelligence APIs for AI agents.

com.datakoot/security-intel-mcp