{"apiVersion":"v1","directorySlug":"vulntel-mcp-3b282693a3","title":"vulntel","description":"A hosted MCP server that gives an AI agent source-grounded vulnerability intelligence: NVD, CISA KEV, FIRST EPSS, OSV/GHSA and CISA SSVC fused into exploitation-first answers, by-mechanism search, and a fact-check for the CVEs an agent might hallucinate. Free for authorized security research.","pageUrl":"https://www.mcpbundles.com/skills/vulntel-mcp-3b282693a3","connectPath":"importable","connectAction":"import_server","catalogListing":false,"bundleSlug":null,"listingKind":"remote_mcp","kind":"provider","transportUrl":"https://mcp.vulntel.com/mcp","hostedMcpUrl":null,"toolCount":13,"toolInventoryStatus":"observed","refreshedAt":"2026-11-03T13:26:00.516172+00:00","registryName":"com.vulntel/vulntel-mcp-3b282693a3","registryVersion":"2026.11.3","registryEligible":true,"tools":[{"name":"enrich_cve","description":"Full intelligence for a single CVE: CVSS, KEV status, EPSS, CISA SSVC\n(exploitation/automatable/technical_impact), P1-P4 priority with rationale,\naffected products/versions, Debian/Ubuntu/Alpine fixed builds per release\n(`distro_fixes`), and (live) public-exploit signal.","inputSchema":{"type":"object","required":["cve_id"],"properties":{"cve_id":{"type":"string"},"include_poc":{"type":"boolean","default":true}}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"enrich_cve","displayName":"enrich_cve","title":"enrich_cve"},{"name":"check_technology","description":"Find vulnerabilities affecting a product across NVD (CPE) and OSV\n(package ecosystems), de-duplicated and ranked by priority/EPSS/CVSS.","inputSchema":{"type":"object","required":["product"],"properties":{"limit":{"type":"integer","default":20},"vendor":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"product":{"type":"string"},"version":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"ecosystem":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null}}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"check_technology","displayName":"check_technology","title":"check_technology"},{"name":"hunt_plan","description":"Turn a recon'd stack into a ranked dig-order for authorized bug-hunting.","inputSchema":{"type":"object","required":["technologies"],"properties":{"per_tech":{"type":"integer","default":4},"technologies":{"type":"array","items":{"type":"string"}}}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hunt_plan","displayName":"hunt_plan","title":"hunt_plan"},{"name":"observe","description":"Scan a host's exposed stack and join it to the CVE corpus — the recon workhorse.\nFingerprints the homepage + JS bundles (recovering the backend identity and API endpoints\nhomepage detection misses on SPAs), then ranks against live KEV / SSVC-active / high-EPSS\ninto a dig-order. Fetches only public pages — authorized targets only.","inputSchema":{"type":"object","required":["host"],"properties":{"host":{"type":"string"},"fresh":{"type":"boolean","default":false},"per_tech":{"type":"integer","default":4}}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"observe","displayName":"observe","title":"observe"},{"name":"search_vulns","description":"Search the CVE corpus — one entry point, three retrieval modes picked from your arguments:","inputSchema":{"type":"object","properties":{"cwe":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"days":{"anyOf":[{"type":"integer"},{"type":"null"}],"default":null},"limit":{"type":"integer","default":20},"order":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"query":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"cve_id":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"product":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null}}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"search_vulns","displayName":"search_vulns","title":"search_vulns"},{"name":"find_attack_approaches","description":"Find how bugs *like this* were actually FOUND — retrieve real disclosed bug-bounty\nreport mechanic-cards whose approach is closest (by mechanism) to your query or a seed CVE.","inputSchema":{"type":"object","properties":{"days":{"anyOf":[{"type":"integer"},{"type":"null"}],"default":null},"capec":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"limit":{"type":"integer","default":10},"query":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"tried":{"anyOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}],"default":null},"cve_id":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"bug_class":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null}}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"find_attack_approaches","displayName":"find_attack_approaches","title":"find_attack_approaches"},{"name":"find_continuations","description":"When you're STUCK mid-hunt: describe your POSITION — the attacker state/capabilities you hold,\nstripped of product names — and get the CONTINUATIONS that worked from positions like it, matched\nagainst the full disclosed-report BODIES (the concrete step/payload/precondition), not just the\ndistilled card. This is the \"I have a messy pile of capabilities, what are my legal moves?\" layer.","inputSchema":{"type":"object","required":["position"],"properties":{"limit":{"type":"integer","default":10},"program":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"position":{"type":"string"}}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"find_continuations","displayName":"find_continuations","title":"find_continuations"},{"name":"assist_submission","description":"Submission & escalation co-pilot for a bug-bounty finding. Paste your DRAFT finding (and what you\nalready tried / couldn't achieve) and get a grounded brief built from the closest REAL disclosed reports:\n(1) precedent & validity — is this an accepted class, with citable reports (ammunition if it was\ndisputed/closed); (2) what's novel/stronger about yours — what to lead with; (3) an escalation playbook\nINCLUDING moves you may NOT have tried, each with honest feasibility; (4) submission-framing ti","inputSchema":{"type":"object","required":["finding"],"properties":{"limit":{"type":"integer","default":15},"query":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"finding":{"type":"string"}}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"assist_submission","displayName":"assist_submission","title":"assist_submission"},{"name":"program_outcome_prior","description":"At the START of an engagement on a bug-bounty PROGRAM, get a grounded prior over what bug\nclasses have historically LANDED there — to decide what to look at first and what to skip.","inputSchema":{"type":"object","required":["program"],"properties":{"program":{"type":"string"}}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"program_outcome_prior","displayName":"program_outcome_prior","title":"program_outcome_prior"},{"name":"new_in_scope","description":"Find FRESH attack surface: bounty-eligible assets that entered a public bug-bounty program's scope in the\nlast `days` (HackerOne, Bugcrowd, Intigriti, YesWeHack, mirrored daily), the least-hunted surface there is.","inputSchema":{"type":"object","properties":{"days":{"type":"integer","default":7},"limit":{"type":"integer","default":50},"program":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"platform":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"asset_type":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null}}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"new_in_scope","displayName":"new_in_scope","title":"new_in_scope"},{"name":"verify_cve_claim","description":"Fact-check a claim about a CVE against the corpus — catch hallucinations\nbefore they ship. Verifies: does the CVE exist; does it affect the claimed\nproduct at the claimed version; is the severity right; is it actually\nKEV-exploited. Returns per-assertion verdicts (supported / refuted /\nunverifiable) with cited evidence.","inputSchema":{"type":"object","required":["cve_id"],"properties":{"claim":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"cve_id":{"type":"string"},"product":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"version":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"severity":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null},"exploited":{"anyOf":[{"type":"boolean"},{"type":"null"}],"default":null}}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"verify_cve_claim","displayName":"verify_cve_claim","title":"verify_cve_claim"},{"name":"corpus_stats","description":"Corpus size and data freshness (CVE / KEV / EPSS counts and latest timestamps).","inputSchema":{"type":"object","properties":{}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"corpus_stats","displayName":"corpus_stats","title":"corpus_stats"},{"name":"search_public_code","description":"Search public repositories for an exact code string; return WHERE it appears.","inputSchema":{"type":"object","required":["code"],"properties":{"code":{"type":"string"},"lang":{"type":"string","default":"c"},"limit":{"type":"integer","default":50}}},"annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"search_public_code","displayName":"search_public_code","title":"search_public_code"}],"toolSource":"directory_preview","agentAction":"both","installLinks":[{"id":"cursor","label":"Cursor","href":"cursor://anysphere.cursor-deeplink/mcp/install?name=vulntel&config=eyJ1cmwiOiAiaHR0cHM6Ly9tY3AudnVsbnRlbC5jb20vbWNwIn0%3D"},{"id":"vscode","label":"VS Code","href":"vscode:mcp/install?%7B%22name%22%3A%22vulntel%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fmcp.vulntel.com%2Fmcp%22%7D"},{"id":"vscode-insiders","label":"VS Code Insiders","href":"vscode-insiders:mcp/install?%7B%22name%22%3A%22vulntel%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fmcp.vulntel.com%2Fmcp%22%7D"},{"id":"claude-web","label":"Claude.ai","href":"https://claude.ai/customize/connectors?modal=add-custom-connector&connectorName=vulntel&connectorUrl=https%3A%2F%2Fmcp.vulntel.com%2Fmcp"},{"id":"codex","label":"Codex","copyText":"codex mcp add \"vulntel\" --url \"https://mcp.vulntel.com/mcp\""},{"id":"chatgpt","label":"ChatGPT","href":"https://www.mcpbundles.com/docs/integrations/chatgpt"}],"catalogUrl":"https://www.mcpbundles.com/api/directory/v1/servers/vulntel-mcp-3b282693a3","callUrl":"https://www.mcpbundles.com/api/directory/v1/servers/vulntel-mcp-3b282693a3/tools/{tool}","mcpServerUrl":"https://mcp.vulntel.com/mcp","liveCatalogUrl":"https://www.mcpbundles.com/api/directory/v1/servers/vulntel-mcp-3b282693a3?live=1"}