EchelonGraph MCP server

This is a free helper that connects your AI assistant to EchelonGraph, a service that collects public security data about software flaws (called CVEs). Once it is connected, you can ask plain questions like whether a bug is being actively exploited, or how many exposed machines on the internet are running a vulnerable version. It is handy for anyone who has to keep software patched and wants quick answers without hunting through several websites.

What this MCP server does

You ask your AI a question in normal words, for example whether a specific CVE is being exploited. Your AI sends that request to this helper. The helper talks to EchelonGraph's public service, which mixes data from NVD, MITRE, CISA's known exploited list, EPSS scores, GitHub advisories and internet exposure scans. The helper brings the result back, and your AI turns it into a clear answer in your chat window. Every answer also says when it was measured and how, so your AI will not treat a missing result as a clean bill of health.

What you can do with it

• Look up one CVE and see its severity, exploit likelihood, and whether it is on CISA's known exploited list
• Search CVEs by keyword, severity, or minimum CVSS score
• Check how many internet exposed services are running a version tied to a CVE
• See the newest additions to CISA's Known Exploited Vulnerabilities catalog
• Check whether a product or package version is affected by known flaws
• Review a software bill of materials (SBOM) or a project's lockfiles for known issues
• Read a weakness type (CWE) and the CVEs linked to it

Try asking your AI

• “Is CVE-2023-44487 actively exploited, and how many exposed services does EchelonGraph's radar show for it?”
• “Find critical CVEs that mention Tomcat with a CVSS of 9 or more.”
• “Which CVEs has CISA added to KEV since 1 September, and which have known ransomware use?”
• “How has CVE-2024-3094's EPSS score changed over time?”

What it gives back to you

You get answers in the chat as text: counts, lists, short summaries, numbers with labels, and sometimes links to references. For a single CVE, you may see its severity scores, exploit likelihood, known exploited status, and internet exposure count. Results also include notes about when the data was measured and whether it was fully assessed. Nothing gets changed on your computer or in any account; it is purely reading information.

Before you start

Who it's for

Anyone who needs quick answers about software vulnerabilities, like IT support, system administrators, security analysts, and developers who want to check if a version is safe.

Jobs it suits