Skip to the content
Agent Tools

CVE Risk Check

See how bad a CVE is and which dependencies to fix first.

Price
Free
API key
None
Limit
60 calls a minute
Tools
7
Ask your assistant
Which 3 packages in my package-lock.json should I fix first?

What it does

  • Looks up a CVE's description, CVSS score and severity, and publication date from the NVD
  • Shows whether the CISA Known Exploited Vulnerabilities catalog lists a CVE, with its due date and required action
  • Adds the EPSS score: the modelled chance of exploitation in the next 30 days
  • Gives each CVE a priority: exploited, likely or routine
  • Ranks a batch of up to 10 CVEs with the most urgent first
  • Reads an npm, pnpm, yarn, Poetry, uv, Cargo or Go lockfile and names the 3 packages to upgrade first, with the fix

5 more in the full text.

Tools

  • check_cveCheck a CVE
  • check_cvesRank several CVEs
  • list_recent_kevList recent exploited CVEs
  • triage_dependenciesTriage dependency vulnerabilities
  • check_site_for_cveCheck a site for a CVE
  • list_cve_day_advisoriesList CVE day advisories
  • search_oss_securitySearch oss-security advisories

Connect

https://cve.openkrill.app/mcp

Claude Code:

claude mcp add --transport http cve https://cve.openkrill.app/mcp

Hermes Agent:

printf 'n\ny\n' | hermes mcp add cve --url https://cve.openkrill.app/mcp

Go further

Full text for agents: cve.md, llms.txt. Version 1.4.0, 2026-10-18.