VulnCheck MCP Server
One-click install for Cursor, VS Code, Claude, and 20+ other MCP clients, powered by API Commons MCP Install — visit install.apicommons.org for more information.
Descriptor
Candidate descriptor · transport
Tools
list_indices— List VulnCheck index names. Names only unless `search` narrows the set; descriptions on request via include_description.describe_index— Report which filters an index accepts, how large it is, and which tool to query it with.search_index— Query a VulnCheck index by name. Identifier, threat-intel and date-range filters, sorting, cursor pagination (limit default 1, max 200).search_target_intel— Find internet-facing hosts confirmed running vulnerable software, mapped to CVEs by version-level fingerprinting.search_ip_intel— Find attacker and target IP infrastructure over a rolling window — C2 servers, honeypots, hosts targeted by initial-access exploits — with geolocation and ASN enrichment.search_canaries— Find exploitation attempts observed against VulnCheck's globally deployed vulnerable canary hosts.search_curated_exploits— Search curated exploit intelligence by exploit maturity and validation level; filter by either KEV catalogue, CVE, or change-date range.list_backups— List all VulnCheck index backups.get_backup— Return all backup links for a given index.search_docs— Search the VulnCheck documentation, returning ranked pages with titles, descriptions and URLs.get_doc— Fetch the raw markdown content of a VulnCheck documentation page.search_cve— Search all VulnCheck indices for a CVE ID; aggregates advisories, exploits, threat intel and vulnerability databases.get_cpe_cves— Return all CVE IDs associated with a CPE 2.3 string, optionally restricted to confirmed-vulnerable. Wildcards supported.search_cpe— Search for CPEs by vendor, product, version, part and return matching CPEs with associated CVEs.search_purls— Return vulnerability findings for one or more Package URLs.identify_component— Convert a vendor, product and optional version into best-match CPE and PURL identifiers with confidence levels.list_recent_advisories— Summarise which advisories were published or updated over a time window; compact digest, defaults to last 24 hours.v4_list_advisories— List all available VulnCheck v4 advisory feeds.v4_search_advisory— Search VulnCheck v4 advisory feeds by advisory name, CVE, vendor, product, version, CPE, PURL and more.v4_list_advisory_backups— List all VulnCheck v4 advisory backup feeds and their availability.v4_get_advisory_backup— Return pre-signed download URLs for a VulnCheck v4 advisory feed backup.list_c2_hostnames— Retrieve the list of VulnCheck C2 hostnames for protective DNS services and denylists.list_c2_tags— Retrieve the list of VulnCheck C2 IP addresses for block lists and firewall rules.get_rules— Retrieve initial-access detection rules by type: suricata, snort. Optional cve filter.
About MCP
The Model Context Protocol (MCP) is an open protocol Anthropic introduced for connecting LLM-based agents to external tools and data sources. Providers publish MCP servers that expose their API surface as structured, discoverable tools — an MCP-compatible client (Claude Desktop, Cursor, Cline, Continue, etc.) can connect to the server and call its tools without any per-provider integration code.
Browse every MCP server on the APIs.io network or compare with the broader Agent Skill surfaces of the same providers.
Work with this as data
Every MCP server here is available over the APIs.io API and to AI agents over MCP.