Exploit Intelligence Platform MCP Server
JSON →An MCP (Model Context Protocol) server that gives AI assistants access to the Exploit Intelligence Platform â hundreds of thousands of vulnerabilities and exploits from NVD, CISA KEV, VulnCheck KEV, InTheWild.io, ENISA EUVD, OSV.dev, EPSS, ExploitDB, Metasploit, GitHub, and more. I
Install
pip install "eip-mcp[http]" Tools · 17
- search_vulnerabilities Search CVEs with full-text query and filters: severity, vendor, product, ecosystem, CWE, CVSS/EPSS thresholds, KEV, Nuclei, year, date range. Supports explicit score mode via score_version + min_score + sort=score_desc. Start here for product research.
- get_vulnerability Full intelligence brief for a CVE or EIP-ID. Includes ranked exploits (AI analysis, MITRE techniques, source URLs), products, Nuclei templates (with description/impact/remediation), references.
- search_exploits Browse exploits with structured filters only (no free-text query): source, language, LLM classification, author, stars, CVE, vendor, product, attack_type, complexity, reliability, requires_auth.
- get_exploit_code Retrieve exploit source code by platform ID (auto-selects main file)
- get_exploit_analysis Full AI analysis for a single exploit: classification, attack type, complexity, reliability, MITRE ATT&CK, summary, and trojan/deception indicators
- get_nuclei_templates Nuclei scanner templates with description, impact, remediation, and Shodan/FOFA/Google dork queries
- list_authors Top exploit researchers ranked by exploit count
- get_author Author profile with all their exploits and CVE context
- list_cwes CWE categories ranked by vulnerability count
- get_cwe CWE detail with description, exploit likelihood, parent hierarchy
- list_vendors Software vendors ranked by vulnerability count
- list_products Discover exact product names for a vendor (CPE name lookup with vuln counts)
- lookup_alt_id Resolve alternate IDs (EDB-XXXXX, GHSA-XXXXX) to their CVE
- audit_stack Audit a tech stack for critical/high severity CVEs with exploits, sorted by EPSS risk
- generate_finding Generate a Markdown pentest report finding — all sections present with N/A when data is absent
- get_platform_stats Platform-wide counts and data freshness
- check_health API health and ingestion source timestamps
Environment variables
EIP_MCP_HOSTEIP_MCP_PORTEIP_API_KEY