How do I connect Cveasy MCP Server to Claude?

The listing records `/Users/ /.bun/bin/bun run /absolute/path/to/cveasy-mcp/src/index.ts` as its setup step. Run it, then follow the repository's instructions for the client configuration; the listing names Claude Desktop, Claude Code as compatible clients.

Is Cveasy MCP Server free?

The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.

What can Cveasy MCP Server do?

Cveasy MCP Server documents 40 tools to the agent, including bas_findings_search, bas_mitre_coverage, bas_scan_findings. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.

Cveasy MCP

Unclaimed

by CVEasy

MCP server for CVEasy AI — connect Claude Desktop & Claude Code to your live CVEasy install. Thin client over the CVEasy REST API.

Install

$/Users/<you>/.bun/bin/bun run /absolute/path/to/cveasy-mcp/src/index.ts

Set up this server

Compare servers My Stack

This server needs project-specific setup. Follow the project instructions; no reusable public launch command is available yet.

Project instructions

claudeclaude-desktopctemcvemcpmodel-context-protocolsecuritytypescriptvulnerability-management

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Security profile

Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works

40 of 40 tools

Documented tools (40)

From project documentation. A server handshake does not verify each tool’s description or behavior.

bas_findings_search

Search BAS findings (severity/module/MITRE/CVE/scan; carries validation verdicts).

bas_mitre_coverage

MITRE ATT&CK coverage matrix.

bas_scan_findings

Findings for a scan.

bas_scan_get

One scan's status/progress (poll after starting).

bas_scan_start

Launch a BAS scan (target must be within an active authorization scope).

bas_scans_list

List attack-simulation scans.

bas_stats

Aggregate BAS stats.

bas_validate_cve

Targeted scan to confirm a CVE's exploitability.

business_context_set

Attach asset-criticality / data-classification / impact to a CVE.

cve_fix_availability

Whether a fixed version actually exists: available / mitigation-only / not documented.

cve_validation_status

Whether a CVE is BAS-confirmed exploitable in this environment.

CVEs

inventory_affected_by_cve

Assets affected by a given CVE (blast radius).

inventory_asset_stats

Scanner-side asset statistics.

inventory_concentration

Per-host finding concentration; explicit "no scanner data" status rather than misleading zeros.

inventory_get

One asset's detail + its CVEs.

inventory_list

Canonical assets with criticality/OS/risk.

inventory_stats

Asset counts by criticality / scan coverage.

kev_context

KEV counts, each with its stated denominator.

org_profile

Org name/industry + settings (compliance frameworks, AI provider).

posture_burndown

Remediation burndown / velocity over time.

posture_compliance

Control coverage for a named framework (pci-dss, hipaa, …).

posture_health

Backend reachability + AI runtime / BASzy status. Call first if things fail.

posture_metrics_dashboard

Full Command Center metric bundle.

posture_metrics_summary

Headline risk metrics + band distribution — best source of grounded numbers.

posture_stats

Global counts (CVEs, assets, scans).

report_generate

Render the backend's own HTML/PDF report (local-model narrative) and save it.

report_template_guide

The recommended section skeleton per report type (for reportrender).

report_types

List the report types CVEasy can produce.

scan_import

Import scan findings into the estate (mutates the shared estate — isolated per-client instances only).

system_open_file

Reveal a saved file in Finder.

tenant_list

Workspaces on this install, with the slug to pass as tenant.

threat_actors

Known actors, sectors, CVEs, TTPs.

threat_briefings

Curated briefings (filter by category/severity).

threat_feed

Board feed: top-exploitable, recent KEV, briefings, IoC stats, headlines.

threat_headlines

Live security-news headlines (RSS).

tool_manifest

The pinnable tool manifest and pin status (Secure MCP control (a)).

triage_list

The triage work queue (filter by status/CVE).

triage_stats

Aggregate triage counts.

tris_snapshot

TRIS priority snapshot across a set of CVEs (bands + tally).

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about Cveasy MCP Server

How do I connect Cveasy MCP Server to Claude?: The listing records `/Users/<you>/.bun/bin/bun run /absolute/path/to/cveasy-mcp/src/index.ts` as its setup step. Run it, then follow the repository's instructions for the client configuration; the listing names Claude Desktop, Claude Code as compatible clients.
Is Cveasy MCP Server free?: The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can Cveasy MCP Server do?: Cveasy MCP Server documents 40 tools to the agent, including bas_findings_search, bas_mitre_coverage, bas_scan_findings. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.