Back to Browse

Cverdict MCP Server

Developer ToolsUse Caution4.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

Read-only CVE triage: verdicts from CISA KEV, EPSS and exploit feeds, each reason linked.

About

Read-only CVE triage: verdicts from CISA KEV, EPSS and exploit feeds, each reason linked.

Security Report

4.7
Use Caution4.7High Risk

Valid MCP server (2 strong, 1 medium validity signals). 6 known CVEs in dependencies (1 critical, 2 high severity) ⚠️ Package registry links to a different repository than scanned source. Imported from the Official MCP Registry. Trust signals: 4 highly-trusted packages. 1 finding(s) downgraded by scanner intelligence.

9 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Comma-separated data base URLs ending in /v1/, tried in order. For a fork or a mirror.Optional

Environment variable: CVERDICT_DATA_BASE

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-markusweldon-cverdict": {
      "env": {
        "CVERDICT_DATA_BASE": "your-cverdict-data-base-here"
      },
      "args": [
        "-y",
        "cverdict-mcp"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!