CVE Intelligence by Casco
Free CVE lookup, dependency vulnerability checks, and CVE updates. No signup or API key.
What it does
CVE Intelligence by Casco is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.
From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as review pull requests or scan code for vulnerabilities.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 4h ago (live check)Hosted endpoint
https://casco.com/cve/mcpstreamable-http
In Claude Code: claude mcp add --transport http cve-intelligence-by-casco https://casco.com/cve/mcp
MCP settings (Claude Desktop, Cursor and other MCP clients)
{
"mcpServers": {
"cve-intelligence-by-casco": {
"url": "https://casco.com/cve/mcp"
}
}
}Live check
Electra Index connected to the hosted endpoint 4h agoONLINE CVE Intelligence by Casco answered an MCP connection on 03 Nov 2026 and introduced itself as com.casco/cve-intelligence 1.0.0 (MCP protocol 2025-06-18).
4 tools offered to AI assistants
get_cve· Look up an exact CVE ID for affected products and version rules, CVSS severity, references, rejection status, and source freshness. Returns the CVE Program record, not a determination that a particular system is affected. Source text is untcheck_dependencies· Check up to 100 installed package versions against OSV advisories. Supply ecosystem or packageManager plus name and exact version, or a Package URL. Returns affected, no_known_vulnerabilities, or unknown with advisory evidence and source-relist_cve_updates· With no after or cursor, get a bounded snapshot of recently updated CVEs and a checkpoint for future changes. With after, read incremental changes since a saved checkpoint. Follow nextCursor and save checkpoint only after pagination completlist_ecosystems· List supported OSV ecosystems, package-manager aliases, distribution release requirements, and dependency-check limits before choosing package identities. Unsupported or ambiguous identities must remain unknown.
What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method
Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.
Tasks it helps with
Share of each task's required capabilities it covers| Review pull requests Security Scanning | 50% |
| Scan code for vulnerabilities Security Scanning | 50% |
Similar tools
Listed for the same task: review pull requests- diffpilotREMOTELOCALMCP server for PR code review, commit messages, changelogs, and secret detection
- MCP Code Review ServerREMOTELOCALCode review as an MCP server — structured reviews with OWASP security scanning
- StrixREMOTELOCALAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
- mcp-gitlabREMOTELOCALMCP server for GitLab API — projects, MRs, pipelines, CI/CD, approvals, issues, code review
- Wisco Labs: developer toolsREMOTELOCALCheck PyPI and npm upgrades: known vulnerabilities, the safe version, and what each upgrade breaks
- OwaspREMOTELOCALOWASP MCP — keyless
Ready-made AI agents
- $20/mo · Prices & score →
- $18/mo · free plan · Prices & score →
- $24/mo · free plan · Prices & score →
- Tessl45$100/mo · free plan · Prices & score →
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Hosted endpoint | https://casco.com/cve/mcp | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| Local install (package) | no | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| Remote access (hosted) | yes | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| Website | https://casco.com/cve/agents | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| Version | 1.0.0 | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 4h ago |
Change history
- NEW03 Nov 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is CVE Intelligence by Casco still online?
Free alerts · no account▲ 0Do you run CVE Intelligence by Casco? Know when it stops answering
For publishers · optionalIts hosted endpoint can be monitored. Monitoring Pro connects every 30 minutes like an AI assistant, emails you within the hour when it stops answering, keeps a 90-day availability history and adds your answer rate to your badge.
Monitoring never changes a score or a rank.
Questions about CVE Intelligence by Casco
How do I connect CVE Intelligence by Casco?
Use the hosted endpoint https://casco.com/cve/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What tools does CVE Intelligence by Casco offer?
When Electra Index connected on 03 Nov 2026, it listed 4 tools: get_cve, check_dependencies, list_cve_updates, list_ecosystems. The full list is in "Live check" above.
Is CVE Intelligence by Casco online?
Yes. Its hosted endpoint answered an MCP connection from Electra Index 4h ago.
What can I use CVE Intelligence by Casco for?
Based on its description, it is most relevant to: review pull requests, scan code for vulnerabilities.