AcidPeak

Read-only vulnerability intelligence: CVEs, exploitation evidence, fixes and product matches.

Install

Remote server: your requests and data go to www.acidpeak.com. Claude Code: claude mcp add --transport http acidpeak https://www.acidpeak.com/mcp · Claude app: Settings → Connectors → Add custom connector.

What it can do

The tools this server listed when we connected to it, in its own words.

• lookup_cve — Look up one CVE identifier in AcidPeak's tracked data. Returns severity, CVSS, EPSS, exploitation evidence (CISA KEV, SSVC, sources reportin
• recent_threats — List the newest entries AcidPeak tracks, newest publication date first: vulnerability records, flaws with exploitation evidence and security
• lookup_cves — Look up to 20 CVE identifiers in one call. Returns the short entry for each tracked CVE (severity, exploitation evidence, exploit code, EPSS
• find_products — Find the product and vendor names AcidPeak tracks, with how many entries name each one. Use the returned key or label with vulnerabilities_f
• vulnerabilities_for_products — Find vulnerability records that name any of the given products, newest first, with how each product was matched. Each name is resolved to a
• search — Full-text search across vulnerabilities, reporting and live incidents by CVE id, vendor, product, group or keyword. Ransomware leak-site cla
• breach_notices — List data breach notices that organizations filed with US states and with HHS, newest filing first, one entry per breach with every filing,
• check_packages — Check installed Linux package versions against the distribution's own security statements: RHEL, Rocky Linux and AlmaLinux (rpm), Debian, Ub
• changes_since — What changed in AcidPeak's CVE records since your last successful check, as an append-only list of typed events in id order. Kinds: created
• data_status — How current AcidPeak's data is: when each collection pipeline last delivered and whether it is on time. Check this before treating an empty

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• ponytail-audit 190,451 ★
  Quality audit of the whole repo: bugs, security, real load, missing tests, speed, and what to delete. Most imp
• ponytail-debt 190,451 ★
  Harvest every shortcut: comment into one debt ledger, so deferrals get tracked instead of forgotten. One-shot
• security-and-hardening 117,221 ★
  Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling us
• deal-with-security-advisory 113,505 ★
  Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, pr
• html-ppt-knowledge-arch-blueprint