VulnMCP
未认领A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.
安装
claude mcp add vulnmcp -- poetry --directory /path/to/VulnMCP run vulnmcp更多AI & ML服务器
浏览完整目录安全概况
已认领和已认证的服务器每周接受一次静态扫描，显示代码能触及的范围（外部服务、环境变量、shell 命令、代理配置目录）以及带有已知公告的依赖。认领此列表即可获得。 安全概况的工作原理
16 个工具中显示 16 个
文档中列出的工具 (16)
内容来自项目文档。服务器握手不会验证每个工具的说明或行为。
classify_cwe
Predict CWE categories from a vulnerability description. Returns top-5 predictions with parent CWE mapping.
classify_severity
Classify vulnerability severity (low/medium/high/critical) from a text description. Supports English, Chinese, and Russian with auto-detection.
create_sighting
Create a new sighting for a vulnerability (requires API permissions on most instances).
get_gna_entry
Get a specific GNA entry by numeric ID or exact short name.
get_most_sighted_vulnerabilities
Retrieve a ranking of vulnerabilities by sighting activity to help prioritize important issues.
get_recent_vulnerabilities_by_cwe
Fetch the 3 most recent CVEs for a given CWE ID.
get_vulnerability
Look up a specific vulnerability by ID (e.g. CVE-2025-14847) with optional comments, sightings, bundles, linked vulnerabilities, and KEV enrichment.
guess_cpes
Query cpe-guesser with product keywords to infer likely CPE identifiers.
list_gcve_references
List GCVE references including KEV catalog UUIDs for use with listkeventries.
list_gna_entries
List all Global Numbering Authorities (GNA) from the GCVE registry.
list_kev_entries
List and filter KEV catalog entries by vulnerability ID, status reason, exploited flag, date range, author, or origin catalog UUID.
search_bundles
Search curated vulnerability bundles (grouped CVEs for a campaign, product, or incident), with filters by vulnerability ID or author.
search_comments
Search community comments related to vulnerabilities, with filters by vulnerability ID or author.
search_gna
Search GNA entries by name (case-insensitive substring match).
search_sightings
Search vulnerability sightings (seen/exploited/patched/etc.) with filters to identify what is actively discussed or abused.
search_vulnerabilities
Search vulnerabilities with filters: source, CWE, product, date range, pagination, and optional KEV-aware prioritization.