Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "cve-intel": {
      "type": "http",
      "url": "https://cve-intel.agentdiet.dev/mcp"
    }
  }
}

claude mcp add --transport http cve-intel https://cve-intel.agentdiet.dev/mcp

[mcp_servers.cve-intel]
url = "https://cve-intel.agentdiet.dev/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "cve-intel": {
      "type": "remote",
      "url": "https://cve-intel.agentdiet.dev/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "cve-intel": {
      "type": "http",
      "url": "https://cve-intel.agentdiet.dev/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=cve-intel&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vY3ZlLWludGVsLmFnZW50ZGlldC5kZXYvbWNwIn0%3D"
}

{
  "servers": {
    "cve-intel": {
      "type": "http",
      "url": "https://cve-intel.agentdiet.dev/mcp"
    }
  }
}

{
  "mcpServers": {
    "cve-intel": {
      "httpUrl": "https://cve-intel.agentdiet.dev/mcp"
    }
  }
}

extensions:
  "cve-intel":
    enabled: true
    name: "cve-intel"
    type: streamable_http
    uri: "https://cve-intel.agentdiet.dev/mcp"
    timeout: 300

Quality 90 / 100new

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list carries no ttlMs, so clients re-fetch it

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene93 · weight 30

pass
tools.descriptionsevery tool has a description
warn
tools.description_length1 tools have descriptions over 1,024 characters, which crowds the context
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations2 of 2 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 823 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pulltool history recorded for 0 of the 7 days needed

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

2 tools, about 823 tokens to load them all · tool set b803eda6819b · tools last changed 2026-10-19 · checked 2026-10-19 16:53 UTC

Tool changes

2026-10-19scan_package_cve_advisorieschangeddescription
before
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. WHEN TO USE: Call `scan_package_cve_advisories` when your task requires deterministic `cve-intel` analysis for `package`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `package` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.015 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: scan_package_cve_advisories(package='example')
after · 98% of words in common
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. WHEN TO USE: Call `scan_package_cve_advisories` when your task requires deterministic `cve-intel` analysis for `package`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `package` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: scan_package_cve_advisories(package='example')

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository

provenance55

liveness100

freshness100

hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-0d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://cve-intel.agentdiet.dev/mcp` streamable-http	none	yes	100%	400 ms	2026-07-28, 2025-11-25, 2025-06-18, 2025-03-26	2026-10-19

Tools (2)

get_agent_wallet_statusread-only Inspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other tools on this server for execution. PARAMETER INTERACTIONS: Omit agent_id to inspect the default trial account derived from your client IP, or pass your explicit agent_id or agd_pass_ session key to check a specific funded wallet. Free and read-only: never charges a fee or consumes a free trial call. Example: get_agent_wallet_status(agent_id='example')

scan_package_cve_advisoriesread-only Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. WHEN TO USE: Call `scan_package_cve_advisories` when your task requires deterministic `cve-intel` analysis for `package`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `package` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: scan_package_cve_advisories(package='example')

Schemas: list_tools.

Similar MCP servers

More from dev.agentdiet

And 16 more from this publisher.

Official server.json

{
  "name": "dev.agentdiet/cve-intel",
  "icons": [
    {
      "src": "https://cve-intel.agentdiet.dev/logo.svg",
      "sizes": [
        "any"
      ],
      "mimeType": "image/svg+xml"
    }
  ],
  "title": "AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://cve-intel.agentdiet.dev/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "7.0.15",
  "websiteUrl": "https://cve-intel.agentdiet.dev",
  "description": "Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r."
}