Patch Tuesday MCP Server: Install & Setup

Install Patch Tuesday in Claude Code

Remote URL

Claude Code

claude mcp add --transport http patch-tuesday https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "patch-tuesday": {
      "url": "https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp"
    }
  }
}

PyPI (uv)

Claude Code

claude mcp add patch-tuesday -- uvx patch-tuesday-mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "patch-tuesday": {
      "command": "uvx",
      "args": [
        "patch-tuesday-mcp"
      ]
    }
  }
}

Frequently asked questions

What does the Patch Tuesday MCP server do?

Microsoft Patch Tuesday triage from the MSRC Security Update Guide: monthly rollups, CVE/KB lookups, supersedence chains and EPSS/CISA KEV urgency ranking.

Is the Patch Tuesday MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does Patch Tuesday run locally or remotely?

Local + Remote. Can run locally or be used as a hosted remote server.

How do I add Patch Tuesday to Claude Code?

Run: claude mcp add --transport http patch-tuesday https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp

More security & identity MCP servers

View all

PCI DSS v4.0.1 Compliance Checker

shyshlakov/pci-dss-mcp

PCI DSS static analysis for Go payment code: finds PAN/CVV exposure, weak crypto, missing audit logs and vulnerable deps, each mapped to a PCI requirement.

LocalFreeGo

Kepil

oleg-vdv/kepil

Accountability layer for AI agents: per-version passports, per-job mandates with spending limits, a fail-closed action gate and a hash-chained journal.

LocalFreePython

MolTrust

MoltyCel/moltrust-mcp-server

Trust infrastructure for AI agents: register DIDs, verify identities, query reputation scores, rate agents and manage W3C Verifiable Credentials.

RemoteAccount neededPython

Frisk

1120

Jiangw2718i/frisk

Screen x402 payment counterparties before paying: address sanity, payTo swap, transport safety and spend policy checks with an allow, review or block verdict.

LocalPaid serviceTypeScript

Argus

5531

ironclawdevs27/Argus

Automated web QA via Chrome DevTools MCP — a11y, security, visual, env diff, CI; Aegis redaction.

LocalFree

cmdxray

5440

aurelio-nakamura/cmdxray

Offline safety gate for agent shell commands: rates each command as danger, caution or none and explains every flag, pipe, redirect and subshell.

LocalFreeTypeScript