cve.now MCP
cve.now by Sazabi provides a free public vulnerability feed, CVE/GHSA/OSV lookups, and exact package-version checks against its indexed catalog. No authentication required. No matches do not guarantee safety; model-written summaries are labeled and published under CC-BY 4.0, while upstream data retains its own licensing and attribution.
3 actionsNo account needed
What your bot can do in cve.now MCP
Looks up
- Check stackCheck exact package versions against cve.now's synced vulnerability catalog using a lockfile or package list.
- Get vulnerabilityGet one vulnerability entry by CVE, GHSA or OSV id, as JSON.
- List feedList the newest items in a cve.now feed (critical, all, kev, tech/<slug>, ecosystem/<eco>).
