Skip to main content
Glama

Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database

by com.exploit-intel

Server Details

Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)

If you are the author of this connector, you can claim ownership with GitHub, an HTTP challenge, or a DNS record. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Unhealthy
Last Tested
Transport
Streamable HTTP
URL

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 1 tool update
    • Changedsearch_exploits1 field changed
      • changedInput schema / properties / source / enum
        Previous value: -[
-  "exploitdb",
-  "github",
-  "gitlab",
-  "inthewild",
-  "metasploit",
-  "nomisec",
-  "patchapalooza",
-  "vulncheck_xdb",
-  "writeup"
-]New value: +[
+  "exploitdb",
+  "github",
+  "gitlab",
+  "inthewild",
+  "metasploit",
+  "nomisec",
+  "oscs",
+  "patchapalooza",
+  "poc_monitor",
+  "vulncheck_xdb",
+  "writeup"
+]
  2. 6 tool updates
    • Changedgenerate_finding1 field changed
      • changedInput schema / properties / cve_id / pattern
        Previous value: -"^(?:CVE|EIP)-\\d{4}-\\d{4,7}$"New value: +"^(?:[Cc][Vv][Ee]|[Ee][Ii][Pp])[-\\u2010\\u2011\\u2013\\u2014]\\d{4}[-\\u2010\\u2011\\u2013\\u2014]\\d{4,7}$"
    • Changedget_cwe1 field changed
      • changedInput schema / properties / cwe_id / pattern
        Previous value: -"^(?:CWE-)?\\d{1,9}$"New value: +"^(?:[Cc][Ww][Ee]-)?\\d{1,9}$"
    • Changedget_nuclei_templates1 field changed
      • changedInput schema / properties / cve_id / pattern
        Previous value: -"^(?:CVE|EIP)-\\d{4}-\\d{4,7}$"New value: +"^(?:[Cc][Vv][Ee]|[Ee][Ii][Pp])[-\\u2010\\u2011\\u2013\\u2014]\\d{4}[-\\u2010\\u2011\\u2013\\u2014]\\d{4,7}$"
    • Changedget_vulnerability1 field changed
      • changedInput schema / properties / cve_id / pattern
        Previous value: -"^(?:CVE|EIP)-\\d{4}-\\d{4,7}$"New value: +"^(?:[Cc][Vv][Ee]|[Ee][Ii][Pp])[-\\u2010\\u2011\\u2013\\u2014]\\d{4}[-\\u2010\\u2011\\u2013\\u2014]\\d{4,7}$"
    • Changedsearch_exploits1 field changed
      • changedInput schema / properties / cve / pattern
        Previous value: -"^CVE-\\d{4}-\\d{4,7}$"New value: +"^[Cc][Vv][Ee][-\\u2010\\u2011\\u2013\\u2014]\\d{4}[-\\u2010\\u2011\\u2013\\u2014]\\d{4,7}$"
    • Changedsearch_vulnerabilities1 field changed
      • changedInput schema / properties / cwe / pattern
        Previous value: -"^(?:CWE-)?\\d{1,9}$"New value: +"^(?:[Cc][Ww][Ee]-)?\\d{1,9}$"
  3. 13 tool updates
    • Changedaudit_stack2 fields changed
      • addedInput schema / properties / technologies / maxLength
        Added value: +300
      • addedInput schema / properties / technologies / minLength
        Added value: +1
    • Changedgenerate_finding4 fields changed
      • addedInput schema / properties / cve_id / maxLength
        Added value: +20
      • addedInput schema / properties / cve_id / pattern
        Added value: +"^(?:CVE|EIP)-\\d{4}-\\d{4,7}$"
      • addedInput schema / properties / notes / maxLength
        Added value: +200
      • addedInput schema / properties / target / maxLength
        Added value: +200
    • Changedget_author2 fields changed
      • addedInput schema / properties / author_name / maxLength
        Added value: +200
      • addedInput schema / properties / author_name / minLength
        Added value: +1
    • Changedget_cwe2 fields changed
      • addedInput schema / properties / cwe_id / maxLength
        Added value: +12
      • addedInput schema / properties / cwe_id / pattern
        Added value: +"^(?:CWE-)?\\d{1,9}$"
    • Changedget_exploit_analysis2 fields changed
      • addedInput schema / properties / exploit_id / maximum
        Added value: +2147483648
      • addedInput schema / properties / exploit_id / minimum
        Added value: +1
    • Changedget_exploit_code3 fields changed
      • addedInput schema / properties / exploit_id / maximum
        Added value: +2147483648
      • addedInput schema / properties / exploit_id / minimum
        Added value: +1
      • addedInput schema / properties / file_path / maxLength
        Added value: +500
    • Changedget_nuclei_templates2 fields changed
      • addedInput schema / properties / cve_id / maxLength
        Added value: +20
      • addedInput schema / properties / cve_id / pattern
        Added value: +"^(?:CVE|EIP)-\\d{4}-\\d{4,7}$"
    • Changedget_vulnerability2 fields changed
      • addedInput schema / properties / cve_id / maxLength
        Added value: +20
      • addedInput schema / properties / cve_id / pattern
        Added value: +"^(?:CVE|EIP)-\\d{4}-\\d{4,7}$"
    • Changedlist_authors5 fields changed
      • addedInput schema / properties / page / default
        Added value: +1
      • addedInput schema / properties / page / minimum
        Added value: +1
      • addedInput schema / properties / per_page / default
        Added value: +25
      • addedInput schema / properties / per_page / maximum
        Added value: +50
      • addedInput schema / properties / per_page / minimum
        Added value: +1
    • Changedlist_products2 fields changed
      • addedInput schema / properties / vendor / maxLength
        Added value: +100
      • addedInput schema / properties / vendor / minLength
        Added value: +1
    • Changedlookup_alt_id2 fields changed
      • addedInput schema / properties / alt_id / maxLength
        Added value: +100
      • addedInput schema / properties / alt_id / minLength
        Added value: +1
    • Changedsearch_exploits22 fields changed
      • changedInput schema / properties / attack_type / description
        Previous value: -"Filter by attack type from AI analysis: RCE, SQLi, XSS, DoS, LPE, auth_bypass, info_leak, deserialization, other"New value: +"Filter by attack type from AI analysis (case-insensitive on input; canonical casing returned)"
      • addedInput schema / properties / attack_type / enum
        Added value: +[
+  "RCE",
+  "SQLi",
+  "XSS",
+  "DoS",
+  "LPE",
+  "auth_bypass",
+  "info_leak",
+  "deserialization",
+  "other"
+]
      • addedInput schema / properties / author / maxLength
        Added value: +200
      • changedInput schema / properties / complexity / description
        Previous value: -"Filter by exploit complexity: trivial, simple, moderate, complex"New value: +"Filter by exploit complexity"
      • addedInput schema / properties / complexity / enum
        Added value: +[
+  "complex",
+  "moderate",
+  "simple",
+  "trivial"
+]
      • addedInput schema / properties / cve / maxLength
        Added value: +20
      • addedInput schema / properties / cve / pattern
        Added value: +"^CVE-\\d{4}-\\d{4,7}$"
      • addedInput schema / properties / language / maxLength
        Added value: +40
      • changedInput schema / properties / llm_classification / description
        Previous value: -"Filter by LLM classification: working_poc, trojan, suspicious, scanner, stub, writeup, tool, no_code"New value: +"Filter by LLM classification"
      • addedInput schema / properties / llm_classification / enum
        Added value: +[
+  "no_code",
+  "scanner",
+  "stub",
+  "suspicious",
+  "tool",
+  "trojan",
+  "working_poc",
+  "writeup"
+]
      • addedInput schema / properties / min_stars / minimum
        Added value: +0
      • addedInput schema / properties / page / default
        Added value: +1
      • addedInput schema / properties / page / minimum
        Added value: +1
      • addedInput schema / properties / per_page / default
        Added value: +10
      • addedInput schema / properties / per_page / maximum
        Added value: +25
      • addedInput schema / properties / per_page / minimum
        Added value: +1
      • addedInput schema / properties / product / maxLength
        Added value: +100
      • changedInput schema / properties / reliability / description
        Previous value: -"Filter by exploit reliability: reliable, unreliable, untested, theoretical"New value: +"Filter by exploit reliability"
      • addedInput schema / properties / reliability / enum
        Added value: +[
+  "reliable",
+  "theoretical",
+  "unreliable",
+  "untested"
+]
      • changedInput schema / properties / source / description
        Previous value: -"Filter by source: github, metasploit, exploitdb, nomisec, writeup, gitlab, inthewild, vulncheck_xdb"New value: +"Filter by source"
      • addedInput schema / properties / source / enum
        Added value: +[
+  "exploitdb",
+  "github",
+  "gitlab",
+  "inthewild",
+  "metasploit",
+  "nomisec",
+  "patchapalooza",
+  "vulncheck_xdb",
+  "writeup"
+]
      • addedInput schema / properties / vendor / maxLength
        Added value: +100
    • Changedsearch_vulnerabilities20 fields changed
      • addedInput schema / properties / cwe / maxLength
        Added value: +12
      • addedInput schema / properties / cwe / pattern
        Added value: +"^(?:CWE-)?\\d{1,9}$"
      • addedInput schema / properties / date_from / pattern
        Added value: +"^\\d{4}-\\d{2}-\\d{2}$"
      • addedInput schema / properties / date_to / pattern
        Added value: +"^\\d{4}-\\d{2}-\\d{2}$"
      • addedInput schema / properties / min_cvss / maximum
        Added value: +10
      • addedInput schema / properties / min_cvss / minimum
        Added value: +0
      • addedInput schema / properties / min_epss / maximum
        Added value: +1
      • addedInput schema / properties / min_epss / minimum
        Added value: +0
      • addedInput schema / properties / min_score / maximum
        Added value: +10
      • addedInput schema / properties / min_score / minimum
        Added value: +0
      • addedInput schema / properties / page / default
        Added value: +1
      • addedInput schema / properties / page / minimum
        Added value: +1
      • addedInput schema / properties / per_page / default
        Added value: +10
      • addedInput schema / properties / per_page / maximum
        Added value: +25
      • addedInput schema / properties / per_page / minimum
        Added value: +1
      • addedInput schema / properties / product / maxLength
        Added value: +100
      • addedInput schema / properties / query / maxLength
        Added value: +200
      • addedInput schema / properties / vendor / maxLength
        Added value: +100
      • addedInput schema / properties / year / maximum
        Added value: +2030
      • addedInput schema / properties / year / minimum
        Added value: +1999
  4. 1 tool update
    • Changedsearch_vulnerabilities4 fields changed
      • changedInput schema / properties / min_cvss / description
        Previous value: -"Minimum CVSS score (0-10)"New value: +"Minimum CVSS v3 score (0-10)"
      • addedInput schema / properties / min_score
        Added value: +{
+  "description": "Minimum score for the selected score_version (0-10)",
+  "type": "number"
+}
      • addedInput schema / properties / score_version
        Added value: +{
+  "description": "Score family for min_score / score_desc",
+  "enum": [
+    "v3",
+    "v4",
+    "effective"
+  ],
+  "type": "string"
+}
      • changedInput schema / properties / sort / enum
        Previous value: -[
-  "newest",
-  "published_newest",
-  "oldest",
-  "published_oldest",
-  "cvss_desc",
-  "epss_desc",
-  "relevance",
-  "signal_newest",
-  "exploit_newest",
-  "nuclei_newest"
-]New value: +[
+  "newest",
+  "published_newest",
+  "oldest",
+  "published_oldest",
+  "cvss_desc",
+  "score_desc",
+  "epss_desc",
+  "relevance",
+  "signal_newest",
+  "exploit_newest",
+  "nuclei_newest"
+]
  5. 1 tool update
    • Changedsearch_vulnerabilities2 fields changed
      • changedInput schema / properties / sort / description
        Previous value: -"Sort order (default: newest)"New value: +"Sort order. Aliases are normalized to the current server schema."
      • changedInput schema / properties / sort / enum
        Previous value: -[
-  "newest",
-  "oldest",
-  "cvss_desc",
-  "epss_desc",
-  "relevance"
-]New value: +[
+  "newest",
+  "published_newest",
+  "oldest",
+  "published_oldest",
+  "cvss_desc",
+  "epss_desc",
+  "relevance",
+  "signal_newest",
+  "exploit_newest",
+  "nuclei_newest"
+]
  6. 2 tool updates
    • Changedget_exploit_code2 fields changed
      • changedInput schema / properties / file_path / description
        Previous value: -"Specific file path to view (optional — auto-selects if omitted)"New value: +"Relative path inside the exploit archive (optional — auto-selects if omitted). Absolute paths and traversal patterns are rejected."
      • addedInput schema / properties / file_path / pattern
        Added value: +"^(?![\\\\/])(?![A-Za-z]:[\\\\/])(?!.*\\.\\.)(?!.*~).{1,500}$"
    • Changedsearch_exploits3 fields changed
      • changedInput schema / properties / llm_classification / description
        Previous value: -"Filter by LLM classification: working_poc, trojan, suspicious, scanner, stub, writeup, tool"New value: +"Filter by LLM classification: working_poc, trojan, suspicious, scanner, stub, writeup, tool, no_code"
      • changedInput schema / properties / reliability / description
        Previous value: -"Filter by exploit reliability: reliable, unreliable, untested"New value: +"Filter by exploit reliability: reliable, unreliable, untested, theoretical"
      • changedInput schema / properties / source / description
        Previous value: -"Filter by source: github (direct GitHub crawl, ~400), metasploit (~3,900 modules), exploitdb (~52K), nomisec (GitHub PoCs via nomi-sec, ~19K — most GitHub exploits are here), writeup (reference writeups)"New value: +"Filter by source: github, metasploit, exploitdb, nomisec, writeup, gitlab, inthewild, vulncheck_xdb"
  7. 1 tool update
    • Addedget_exploit_analysis
  8. 1 tool update
    • Changedsearch_vulnerabilities2 fields changed
      • addedInput schema / properties / any_exploited
        Added value: +{
+  "description": "Only return CVEs exploited in the wild (CISA KEV + VulnCheck KEV + InTheWild.io)",
+  "type": "boolean"
+}
      • addedInput schema / properties / ransomware
        Added value: +{
+  "description": "Only return CVEs with confirmed ransomware campaign use",
+  "type": "boolean"
+}
  9. 16 tool updates
    • First observedaudit_stack
    • First observedcheck_health
    • First observedgenerate_finding
    • First observedget_author
    • First observedget_cwe
    • First observedget_exploit_code
    • First observedget_nuclei_templates
    • First observedget_platform_stats
    • First observedget_vulnerability
    • First observedlist_authors
    • First observedlist_cwes
    • First observedlist_products
    • First observedlist_vendors
    • First observedlookup_alt_id
    • First observedsearch_exploits
    • First observedsearch_vulnerabilities

Frequently Asked Questions

Discussions

No comments yet. Be the first to start the discussion!

Login with GitHub to comment

Related MCP Connectors

Related MCP Servers

  • security-intel-mcp

    devsecforge
    A
    license
    Not graded
    quality
    C
    maintenance
    Provides real-time vulnerability intelligence including CVE lookup, EPSS exploit probability, and CISA KEV status from free APIs, enabling AI assistants to prioritize CVEs by real-world risk.
    MIT

  • vuln-intel-mcp

    rohanrajnist
    A
    license
    Not graded
    quality
    C
    maintenance
    Provides CVE lookup, search, and exploit intelligence from public vulnerability sources (NVD, CISA KEV, EPSS) for AI agents to produce remediation guidance without consuming LLM tokens for data fetching.
    1
    MIT
Try in Browser
RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A4.5/5.0
Disambiguation5/5

Each tool has a clearly distinct purpose: audit_stack for stack scanning, check_health for API status, generate_finding for report generation, get_author/ get_cwe/ get_exploit_analysis/ get_exploit_code/ get_nuclei_templates/ get_platform_stats/ get_vulnerability for retrieving specific details, list_authors/ list_cwes/ list_products/ list_vendors for enumerations, lookup_alt_id for ID mapping, and search_exploits/ search_vulnerabilities for filtered searching. The descriptions precisely differentiate similar tools (e.g., search_exploits uses structured filters while search_vulnerabilities supports free-text).

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern with imperative verbs: audit, check, generate, get, list, lookup, search. The naming is uniform and predictable across the entire set, making it easy for an agent to infer tool functionality from the name alone.

Tool Count5/5

Seventeen tools is an appropriate number for a vulnerability intelligence platform. The count covers essential operations (health check, statistics, vulnerability/ exploit details, searches, listings) without being overwhelming or too sparse. Each tool addresses a specific need in the domain.

Completeness5/5

The tool surface comprehensively covers the vulnerability intelligence domain: searching and retrieving vulnerabilities and exploits, analyzing exploits (AI analysis, code retrieval), accessing supporting data (CWE, vendors, products, authors), performing stack audits, generating report findings, and checking API health. There are no obvious gaps for a read-only query platform, and it includes useful extras like Nuclei templates and alternate ID lookup.

Resources