# cve.now MCP

cve.now by Sazabi provides a free public vulnerability feed, CVE/GHSA/OSV lookups, and exact package-version checks against its indexed catalog. No authentication required. No matches do not guarantee safety; model-written summaries are labeled and published under CC-BY 4.0, while upstream data retains its own licensing and attribution.

Category: Developer. Connect from any Rakazo bot at https://rakazo.com/integrations/cve-now-mcp/.

## Actions

- **Check stack** (read-only): Check exact package versions against cve.now's synced vulnerability catalog using a lockfile or package list.
- **Get vulnerability** (read-only): Get one vulnerability entry by CVE, GHSA or OSV id, as JSON.
- **List feed** (read-only): List the newest items in a cve.now feed (critical, all, kev, tech/<slug>, ecosystem/<eco>).
