Free · Live agent plugin service - Vulnerability Intelligence

A free, live agent plugin service that brings vulnerability intelligence into the assistant your team already uses. Research a vulnerability, check what affects a product, or review what changed.

← All applications

Runs on: any MCP compatible assistant or agent
Requires: an MCP compatible client
Autonomy: read only

Open source. Stars and issues on GitHub genuinely shape what we build next.

What it does.

Four operations, all read only.

Search discovers CVEs and CWEs from a description of a problem, a product or a technology, and returns a ranked mix of both. Retrieval takes an exact CVE, CWE or known alias and returns its full canonical document. Product lookup finds indexed CVEs by vendor, product, package, ecosystem and version, with applicability computed from normalised affected-product rows and structured version evidence rather than a name match. Recent listing returns what has been indexed or modified lately, filtered by product, vendor, severity, or whether exploitation is known.

Every record carries a CVSS score and qualitative severity, its mapped CWE identifiers, a lifecycle state of draft, stable or deprecated, a link to the upstream CVE record, and a SHA-256 hash of its content. Pagination is deterministic, so the same traversal returns the same results.

MCP is the protocol assistants use to call external tools. This runs as an MCP server, so the corpus is available inside the assistant your team already works in, rather than as another portal to log into.

What you get

Outcomes, not activity.

ApplicabilityMatched on version, not on nameProduct queries resolve against normalised affected-product rows and structured version evidence, so applicability is computed rather than guessed from a product string.

ProvenanceEvery record carries its sourceEach entry links to its upstream CVE record and carries a SHA-256 of its content, so an answer can be checked rather than taken on trust.

CurrencyReview what changed, not everythingRecently indexed and modified entries filter by product, vendor, severity or known exploitation, with deterministic pagination for repeatable review.

Get started

Add it to your assistant.

Install from the docs Open on GitHub

CloudPeek / Vulnerability Intelligence

Vulnerability research

Research CWE-89. Show me the source and mitigation.

get_vulnerability · { identifier: "CWE-89" }

CWE-89 · MITRE Common Weakness Enumeration

SQL injection

Externally influenced input is interpreted as SQL instead of ordinary data. CloudPeek retrieves the canonical weakness record with its upstream source and content hash.

Read the canonical source

SHA-256 · 701e2d69392e52832f0d6da70ef6320cc014992cde31a4bd5b57f1a6738de6d7

Read-only MCP endpoint

https://mcp.cloudpeek.ai/vulnerability/mcp