Excession Labs CVE intelligence MCP Server

About Excession Labs CVE intelligence

Excession Labs hosts a public CVE intelligence MCP connector with six read-only tools. Search by text, vendor, product, package, ecosystem or a literal source version. Read CVE details, source references, affected-software evidence and available KEV and EPSS data. Check source coverage and collection health, page through hosted revisions, or read changes after a saved cursor. The connector is free and needs no account or API key. Version filters match source assertions; they do not evaluate whether an installed version falls within a vulnerability range. Hosted history starts at the displayed cutover date, and initial observations establish a monitoring baseline.

Excession Labs CVE intelligence tools (6)

Read from the live server on Nov 13, 2026. These are the tools your AI assistant can call once connected.

cve_search

Search the hosted Excession Labs CVE database. Choose recent modification, new publication, or known-exploitation priority. Software/version filters match source assertions; they do not evaluate whether an installation is affected.

cve_get

Read a CVE's descriptions, severity, affected software/version evidence, source references, KEV and EPSS. Large affected-software lists are paginated; inspect the returned cursor and completeness fields.

cve_history

Read normalized source revisions retained after hosted monitoring starts. Version claims can refer to shared affected_groups by group_id. Initial hosted observations establish a baseline; the initial snapshot is not a complete historical ar

cve_status

Read corpus counts, source coverage, collection errors, freshness and saved update checkpoints. A successful bounded query does not imply complete upstream coverage.

cve_sources

Read the hosted source catalog, attribution, update methods and coverage limits.

cve_changes

Read hosted changes after a saved sequence cursor. Process the page before resuming with next_after. This is a read-only feed; it does not create a notification subscription.

How to connect Excession Labs CVE intelligence to Claude, Cursor or VS Code

Excession Labs CVE intelligence runs as a hosted remote MCP server at https://excessionlabs.ai/mcp/cve. Add that URL to your MCP client's config (Claude Code, Cursor, Windsurf or VS Code) and the tools appear immediately, no install required.

{
  "mcpServers": {
    "excession-labs-cve-intelligence": {
      "url": "https://excessionlabs.ai/mcp/cve"
    }
  }
}

Claude Code: claude mcp add --transport http excession-labs-cve-intelligence https://excessionlabs.ai/mcp/cve. VS Code's .vscode/mcp.json uses a servers key instead of mcpServers (see how). Servers that require OAuth or an API key will prompt on first use.