CISA Vulnerability Checker

Example Use Cases

• 1

  Check whether a specific CVE appears in CISA's Known Exploited Vulnerabilities catalog in real time.

• 2

  Monitor and fetch recent CVE entries (by days or hours) to drive alerting, ticketing, or remediation workflows.

• 3

  Integrate KEV lookups and enriched security context into Claude/LLM-driven analysis and automated response pipelines.

Description

This MCP server provides programmatic access to CISA's KEV catalog via REST endpoints, a CLI, and integration points for Claude and Cursor, enabling real-time CVE lookups and monitoring. It supports checking individual CVEs, retrieving recent CVEs by time window, and includes health/status endpoints and API docs. Deployment options include running directly with uvicorn, installing from the repository, or containerizing with Docker; a production instance is hosted at the provided URL. It is useful for automating alerts, enrichment, and remediation workflows that rely on the KEV dataset.