Categories › Security › Code & dependency scanning
Search CVEs, source software/version evidence, KEV, EPSS and public security research.
Remote server: your requests and data go to excessionlabs.ai. Claude Code: claude mcp add --transport http excession-labs-cve-intelligence-and-secu https://excessionlabs.ai/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
search_site — Search the public pages and research notes on excessionlabs.ai. Returns titles, URLs and one-line summaries.get_page — Read one public page of excessionlabs.ai as Markdown. Use a path from search_site or llms.txt.how_to_contact — Return the ways a person can contact Excession Labs: the request form, email, and the request_security_test tool for agents.request_security_test — Send a request for a security test (web application, API, multi-tenant SaaS isolation or AI application) to Excession Labs on behalf of a pecve_search — Search the hosted Excession Labs CVE database. Choose recent modification, new publication, or known-exploitation priority. Software/versioncve_get — Read a CVE's descriptions, severity, affected software/version evidence, source references, KEV and EPSS. Large affected-software lists are cve_history — Read normalized source revisions retained after hosted monitoring starts. Version claims can refer to shared affected_groups by group_id. Incve_status — Read corpus counts, source coverage, collection errors, freshness and saved update checkpoints. A successful bounded query does not imply cocve_sources — Read the hosted source catalog, attribution, update methods and coverage limits.cve_changes — Read hosted changes after a saved sequence cursor. Process the page before resuming with next_after. This is a read-only feed; it does not cNot tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.