check_ip_noise

MCP tool from Cve MCP Server by mukul975

Query GreyNoise for IP scan/attack activity, classification, and associated CVEs

How to use it

Project documentation lists check_ip_noise for the Cve MCP Server MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), then check which tools your installed version makes available. Tool availability can depend on configuration and credentials. A server handshake does not verify this tool’s behavior. See the full listing for setup details.

Install Cve MCP Server

$claude mcp add cve-mcp -- python -m cve_mcp.server

FULL CVE MCP SERVER LISTING

Other tools in Cve MCP Server (27)

bulk_cve_lookup

Batch-fetch details for up to 20 CVEs in a single call with parallel enrichment

calculate_risk_score

Compute composite 0–100 risk score using CVSS, EPSS, KEV status, and PoC availability

check_kev_status

Check whether a CVE appears in CISA's Known Exploited Vulnerabilities catalog

check_poc_availability

Determine if known proof-of-concept code exists for a CVE across multiple sources

check_ransomware

Look up ransomware payment addresses and transaction data from Ransomwhere

generate_risk_report

Generate a formatted executive security report for one or more CVEs with recommendations

get_attack_patterns

Retrieve CAPEC attack pattern details associated with a CWE or CVE

get_cve_references

Extract and categorize all reference links for a CVE (patches, advisories, exploits)

get_cvss_details

Parse and explain a CVSS v3.1 vector string with per-metric breakdown

get_cwe_info

Look up Common Weakness Enumeration details by CWE ID from embedded database

get_epss_score

Get EPSS exploitation probability (0–1) and percentile for one or more CVEs

get_mitre_techniques

Map a CVE or CWE to relevant MITRE ATT&CK techniques, tactics, and mitigations

get_trending_cves

Retrieve trending CVEs based on high EPSS scores and recent KEV additions

lookup_cve

Fetch detailed CVE record from NVD including CVSS scores, CWEs, affected products, references, and timeline

lookup_ip_reputation

Check IP address abuse history and confidence score via AbuseIPDB

passive_dns_lookup

Retrieve historical DNS resolution data for a domain from CIRCL Passive DNS

prioritize_cves

Rank a list of CVEs by composite risk score for triage prioritization

scan_dependencies

Scan package names and versions against OSV.dev for known vulnerabilities

scan_github_advisories

Search GitHub Security Advisories by ecosystem, package, or severity

search_cves

Search NVD for CVEs by keyword, product name, severity, or date range

search_exploits

Search GitHub for public proof-of-concept exploits and exploit code repositories

search_iocs

Query ThreatFox for Indicators of Compromise linked to malware families

search_malware

Search MalwareBazaar for malware samples by hash, tag, or signature

shodan_host_lookup

Get open ports, services, banners, and vulnerabilities for an IP via Shodan

triage_cve

One-call triage that fans out NVD + EPSS + CISA KEV (+ public PoC for depth != "quick") concurrently, computes the composite risk score with a KEV hard override, falls back to VulnCheck NVD++ when NIST NVD is throttled, and on depth="deep" emits the SSVC v2 gated decision

urlscan_check

Submit a URL for scanning or retrieve previous scan results from URLScan.io

virustotal_lookup

Analyze file hashes, URLs, domains, or IPs against 70+ antivirus engines