Built for agents

An MCP server, a JSON API and Markdown for every page. No key, no sign-up.

Built for agents

Give your agent the context

One prompt for Claude Code, Cursor, Codex or any MCP client.

Connect to the Vigilbase CVE MCP server (https://cve.vigilbase.com/mcp, streamable HTTP, no key needed) and use it for vulnerability triage:
1. Scan my lockfiles with scan_dependencies and list the vulnerable packages, exploited-in-the-wild CVEs first, then ones with public exploit code.
2. For each of those CVEs, call get_cve_coverage: tell me whether my WAF vendor claims a rule, whether it blocks by default, and what Vigilbase's own lab test measured.
3. Run check_exposure for my domain on the top CVEs.
4. Give me a prioritised fix list with the fixed versions, and cite the source URLs the server returns.

claude mcp add --transport http vigilbase-cve https://cve.vigilbase.com/mcp

{
  "mcpServers": {
    "vigilbase-cve": {
      "url": "https://cve.vigilbase.com/mcp"
    }
  }
}

# ~/.codex/config.toml
[mcp_servers.vigilbase-cve]
url = "https://cve.vigilbase.com/mcp"

https://cve.vigilbase.com/mcp

scan_dependenciesget_cve_coveragecheck_exposurelist_trendingsearch_cveslist_new_rulescompare_vendorsget_waf_benchmarklist_exploited_gapsget_scan_stats

MCP server

Streamable HTTP, read-only. Tools: search_cves, get_cve_coverage, scan_dependencies, check_exposure, list_trending, get_scan_stats, list_new_rules, compare_vendors, get_waf_benchmark, list_exploited_gaps.

Claude Code

$ claude mcp add --transport http vigilbase-cve https://cve.vigilbase.com/mcp

Any MCP client

{
  "mcpServers": {
    "vigilbase-cve": {
      "url": "https://cve.vigilbase.com/mcp"
    }
  }
}

JSON API

GET/api/v1/cvessearch: q, view, vendor, limit
GET/api/v1/cves/{id}one CVE: coverage, lab, social
POST/api/v1/scanlockfile: JSON {filename, content} or -F file=@…
GET/api/v1/exposurecve + domain: edge in front and coverage
GET/api/v1/trendingwindow=24h|7d
GET/api/v1/statsdependency scan statistics
GET/api/v1/labour measured results
GET/api/v1/feednew vendor rules
GET/api/v1/vendorscomparison, since=YYYY-MM-DD

$ curl -F file=@package-lock.json https://cve.vigilbase.com/api/v1/scan

Views: exploited, covered, gap, all. Vendors: cloudflare, aws, azure, google, fastly, f5, akamai, crs.

Markdown

Append .md to any CVE page, or send Accept: text/markdown. llms.txt describes the whole site.

$ curl -H 'accept: text/markdown' https://cve.vigilbase.com/cve/CVE-2021-44228