MCP server

Vuln Triage

io.github.kimmawla/vuln-triage-mcp

Checked 26 Oct 2026, 08:31 UTC · Still published on its registry; checked against OSV.dev; never run by us

Tells your AI agent which vulnerabilities to fix first, using OSV.dev, FIRST EPSS, and CISA KEV.

Runs on your computer

Source

At a glance

Type: MCP server
Publisher: Not verified
Status: Runs on your computer
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code
Last checked: 26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to Cursor Add to VS Code VS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add vuln-triage-mcp -- uvx vuln-triage-mcp@0.1.0

Claude Desktop

{"mcpServers":{"vuln-triage-mcp":{"command":"uvx","args":["vuln-triage-mcp@0.1.0"]}}}

Codex (config.toml)

[mcp_servers.vuln-triage-mcp]
command = "uvx"
args = ["vuln-triage-mcp@0.1.0"]

Gemini CLI

{"mcpServers":{"vuln-triage-mcp":{"command":"uvx","args":["vuln-triage-mcp@0.1.0"]}}}

Cursor

{"mcpServers":{"vuln-triage-mcp":{"command":"uvx","args":["vuln-triage-mcp@0.1.0"]}}}

VS Code

{"servers":{"vuln-triage-mcp":{"type":"stdio","command":"uvx","args":["vuln-triage-mcp@0.1.0"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

Related MCP servers

Outage.Me
Live cloud/SaaS outages, provider reliability and exploited CVEs from official status pages and CISA
Sectora
Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.
Koot by Datakoot
One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.
EchelonGraph CVE & Exposure
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
CyberMax Data
Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.
Kevscope
CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.
Kevscope CVE Check
Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.
Security Intel MCP
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.kimmawla/vuln-triage-mcp.svg)](https://aptlynx.net/servers/io.github.kimmawla/vuln-triage-mcp)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents