CVE Risk Check MCP Server: Install & Setup

Install CVE Risk Check in Claude Code

Claude Code

claude mcp add --transport http cve-risk-check https://cve.openkrill.app/mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "cve-risk-check": {
      "url": "https://cve.openkrill.app/mcp"
    }
  }
}

Frequently asked questions

What does the CVE Risk Check MCP server do?

Checks CVEs and dependency lists against OSV, NVD, EPSS and CISA KEV, and ranks what to fix first.

Is the CVE Risk Check MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does CVE Risk Check run locally or remotely?

Remote. Hosted by the provider. You connect with a URL, nothing to install.

How do I add CVE Risk Check to Claude Code?

Run: claude mcp add --transport http cve-risk-check https://cve.openkrill.app/mcp

More security & identity MCP servers

View all

Cybersecurity

gaoharimran29-glitch/Cybersecurity-MCP-Server

Local security reconnaissance: WHOIS, DNS and subdomain enumeration, Nmap scanning, TLS inspection, tech fingerprinting, CVE and IP reputation lookups.

LocalFreePython

crosscheck

Security review of skills and MCP servers before install; paid per call via x402.

RemotePaid service

Datakoot Domain & Company

Domain recon: RDAP registration, DNS, SPF/DMARC deliverability, tech stack and subdomains from CT logs.

RemoteFree

CrawlCheck

A signed answer about any site before an agent acts: policy, what crawlers were served, findings, a decision per action.

RemoteFree

Datakoot Security Intel

CVE lookups with CISA KEV and EPSS exploit scores, plus OSV package vulnerabilities and package.json audits.

RemoteFree

CertScore.ai MCP Light

Four tools scan public websites for cookie, tracker, consent, policy, and HTTPS/TLS risk signals.

RemoteFree