The request names EchelonGraph, so EchelonGraph MCP comes first: a free, keyless MCP server offering CVE data plus a per-CVE internet-exposure footprint, with search_cves, cve_summary and cve_exposure actions 1. Alternatives that cover CVE lookup or exposure intelligence are ContrastAPI, which offers CVE lookup and search via a free API and MCP server 818, DataNexus MCP, which returns CVE risk verdicts combining CVSS, KEV and EPSS 616, and watchTowr, which lists CVE intelligence and KE
- 1
EchelonGraph MCPechelongraph.iofound in code, not yet checked
Free, keyless MCP server that queries the EchelonGraph CVE feed and a per-CVE internet-exposure footprint for Claude, Cursor, or any MCP client, via search_cves, cve_summary and cve_exposure 1.
for agents: cve_exposure · search_cves · cve_summary
- 2
ContrastAPIcontrastcyber.comverified and signed
Free security intelligence API and MCP server whose cve_lookup returns CVSS, EPSS and KEV status for a CVE ID, and whose cve_search filters the CVE database 818.
official:MCP server · ContrastAPI
for agents: CVE Lookup · cve_lookup · cve_search
- 3
DataNexus MCPdatanexusmcp.comverified and signed
Remote MCP server whose fetch_cve_risk_summary combines CVSS severity, CISA KEV status and EPSS probability into one CVE risk verdict 616.
official:MCP server · DataNexus MCPMCP server · DataNexus MCP
for agents: security_fetch_cve_epss · security_fetch_cve_risk_summary · fetch_cve_risk_summary
- 4
watchTowr Platformwatchtowr.comfound in code, not yet checked
Exposure management platform whose list_vulnerability_intelligence and list_cisa_kev_findings actions list tracked CVEs and KEV-tagged findings 212.
+1 community tools built for it
for agents: list_vulnerability_intelligence · list_cisa_kev_findings · get_critical_exposure_report
Sources
- 1EchelonGraph MCP — CVE & Exposure Intel for Claude & Cursorechelongraph.io · read 2026-10-29
- 2watchTowr | Preemptive Exposure Managementwatchtowr.com · read 2026-10-29
- 6DataNexus MCP — Public Data Intelligence for AI Agentsdatanexusmcp.com · read 2026-10-29
- 8ContrastAPI — Security Intelligence APIapi.contrastcyber.com · read 2026-10-29
- 12watchTowr Platform MCP Server: declares "list_vulnerability_intelligence" (the record we read)github.com · read 2026-10-24
- 16DataNexus MCP: declares "security_fetch_cve_epss" (the record we read and signed)unfragile.ai · read 2026-10-24
- 18ContrastAPI: declares "CVE Lookup" (the record we read and signed)unfragile.ai · read 2026-10-24
Left out: endoflife.ai, because each one's own page says it is retired or discontinued.
For agents: the 10 actions behind this answer
cve_exposure · EchelonGraph MCP Server found in code, not yet checked
list_vulnerability_intelligence · watchTowr Platform MCP Server found in code, not yet checked
List vulnerability intelligence entries (CVEs tracked by watchTowr).
vulnx_get_by_id · vulnx found in code, not yet checked
Retrieve a full vulnerability or template record by ID (CVE or Nuclei). NOTE: Invoke only when `agent_vulnx` instructs or the user explicitly requests it; otherwise do not call this tool.
· ProjectDiscovery Katana website read, tools not yet checked
ProjectDiscovery maps what your company exposes to the internet, proves which findings are exploitable, and carries each one to a fix with the evidence attached.
· ProjectDiscovery Nuclei website read, tools not yet checked
ProjectDiscovery maps what your company exposes to the internet, proves which findings are exploitable, and carries each one to a fix with the evidence attached.
· ProjectDiscovery Naabu website read, tools not yet checked
ProjectDiscovery maps what your company exposes to the internet, proves which findings are exploitable, and carries each one to a fix with the evidence attached.
· ProjectDiscovery Httpx website read, tools not yet checked
ProjectDiscovery maps what your company exposes to the internet, proves which findings are exploitable, and carries each one to a fix with the evidence attached.
gtm-partnership-architecture · gtm-partnership-architecture verified and signed
Build and scale partner ecosystems that drive revenue and platform adoption. Use when building partner programs from scratch, tiering partnerships, managing co-marketing, making build-vs-partner decisions, or structuring crawl-walk-run partner deployment.
getLatestPlatformVersion · Rumble API (deprecated) verified and signed
Returns latest platform version
· ProjectDiscovery Notify website read, tools not yet checked
ProjectDiscovery maps what your company exposes to the internet, proves which findings are exploitable, and carries each one to a fix with the evidence attached.
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.