Categories › Security › Code & dependency scanning
ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.
Remote server: your requests and data go to secdb.nttzen.cloud. Claude Code: claude mcp add --transport http zen-secdb https://secdb.nttzen.cloud/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
epss_timeseries — Get the historical EPSS time series for a specific CVE. ## What this tool does Returns the historical EPSS score, percentile, and model verslinux_audit — Perform a Linux package vulnerability audit using SecDB. ## What this tool does Analyzes the installed packages of a Linux system-identifiedlinux_os — List supported Linux operating systems and their corresponding versions for use with the `linux_audit` tool. ## What this tool does Returns sightings_search — Search real-world vulnerability sightings in SecDB. ## What this tool does Retrieves information about where and how a vulnerability appearsssvc_calculator — Compute CISA SSVC (Stakeholder-Specific Vulnerability Categorization) for a CVE. ## What this tool does Calculates the SSVC decision (Track,vulnerability_info — Get detailed information about a specific CVE. ## What this tool does Retrieves the full vulnerability record for a CVE from SecDB, includinvulnerability_score — Get CVSS and current EPSS score for one CVE, or for a list of CVEs in a single call. ## What this tool does Returns a full risk snapshot forvulnerability_search — Perform a full-text vulnerability search in SecDB. ## What this tool does Searches across: - CVE entries - Security advisories - Exploit reffeed_report_catalog — List available public ZEN SecDB feed reports. ## What this tool does Returns the catalog of available ZEN SecDB public feed reports, includifeed_report — Run a public ZEN SecDB feed report. ## What this tool does Executes a predefined report on ZEN SecDB public feed data and returns structuredpurl_audit — Perform a software package vulnerability audit using SecDB. ## What this tool does Analyzes a list of software packages identified by PURL (advisory_info — Get detailed information about a specific security advisory. ## What this tool does Retrieves a security advisory (for example RHSA, DSA, UScwe_info — Get information about a specific weakness (CWE), its related attack patterns (CAPEC) and ATT&CK techniques. ## What this tool does Returns tkev_check — Check whether one or more CVEs are listed in the CISA KEV or EU KEV catalogs of known exploited vulnerabilities. ## What this tool does For vulnerability_exploits — List the known exploits, proofs of concept, and detection templates for a specific CVE. ## What this tool does Returns the exploit maturity cvss_explain — Calculate the score of any CVSS vector string and explain it in natural language. ## What this tool does Takes a CVSS vector string, not tiepackage_info — List the security advisories known for a package, with the affected and fixed versions. ## What this tool does Returns the advisories of a pproduct_vulnerabilities — List the CVEs of a product by its CPE vendor and product names, with the affected version ranges. ## What this tool does Returns the CVEs whvulnerability_history — Get the timeline of events for a specific CVE. ## What this tool does Returns the dated events known to SecDB for a CVE, most recent first: kev_list — List the entries of the CISA KEV and EU KEV catalogs of known exploited vulnerabilities, most recent first. ## What this tool does Returns tcpe_search — Find the CPE vendor and product names that SecDB uses for a product, with the number of CVEs of each one. ## What this tool does Searches thattack_info — Get information about a MITRE ATT&CK technique and the weaknesses and vulnerabilities linked to it through CAPEC. ## What this tool does Retvulnerability_attack — Get the weaknesses (CWE), attack patterns (CAPEC) and MITRE ATT&CK techniques linked to a specific CVE. ## What this tool does Follows the cNot tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.