Search / app.vercel.exploitwatch-kappa/exploitwatch
protogridR0· no sign-inCheck dependencies against CISA's real Known Exploited Vulnerabilities feed.
v1.0.0 · active · website · descriptor JSON · versions
{
"mcpServers": {
"exploitwatch": {
"type": "http",
"url": "https://exploitwatch-kappa.vercel.app/api/mcp"
}
}
}claude mcp add --transport http exploitwatch https://exploitwatch-kappa.vercel.app/api/mcp[mcp_servers.exploitwatch]
url = "https://exploitwatch-kappa.vercel.app/api/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"exploitwatch": {
"type": "remote",
"url": "https://exploitwatch-kappa.vercel.app/api/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"exploitwatch": {
"type": "http",
"url": "https://exploitwatch-kappa.vercel.app/api/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=exploitwatch&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vZXhwbG9pdHdhdGNoLWthcHBhLnZlcmNlbC5hcHAvYXBpL21jcCJ9"
}{
"servers": {
"exploitwatch": {
"type": "http",
"url": "https://exploitwatch-kappa.vercel.app/api/mcp"
}
}
}{
"mcpServers": {
"exploitwatch": {
"httpUrl": "https://exploitwatch-kappa.vercel.app/api/mcp"
}
}
}extensions:
"exploitwatch":
enabled: true
name: "exploitwatch"
type: streamable_http
uri: "https://exploitwatch-kappa.vercel.app/api/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-03-26; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky onestools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: check_kev (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)tools.token_costabout 156 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+dns-namespace +website +reachable +uptime-100% ~updated-38d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://exploitwatch-kappa.vercel.app/api/mcp streamable-http | none | yes | 100% | 222 ms | 2025-03-26 | 2026-10-20 |
check_kev | Check a comma-separated list of software dependency/product names (e.g. 'lodash, openssl, apache struts') against CISA's real, public Known Exploited Vulnerabilities (KEV) catalog. Returns any current matches with the CVE ID, description, date added, and known ransomware use -- grounded in CISA's live feed, not a guess. Useful for triaging whether a project's dependencies include anything under active exploitation right now. |
Schemas: list_tools.
{
"name": "app.vercel.exploitwatch-kappa/exploitwatch",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
"remotes": [
{
"url": "https://exploitwatch-kappa.vercel.app/api/mcp",
"type": "streamable-http"
}
],
"version": "1.0.0",
"websiteUrl": "https://exploitwatch-kappa.vercel.app",
"description": "Check dependencies against CISA's real Known Exploited Vulnerabilities feed."
}