Oxiploitability
Sourced, evidence-aware CVE research for CVEs, products, SBOMs and images via NVD, EPSS, KEV, OSV.
What it does
Oxiploitability is an MCP server, a connector that lets an AI assistant use it as a tool. It is installed locally as a package and runs on your machine.
From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as review pull requests or scan code for vulnerabilities.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence) and are not a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · not tested by Electra IndexInstall package
- CARGO
oxiploitability-mcpv0.1.0 · runs locally (stdio)
No ready-made settings: the registry entry does not contain everything needed. Follow the publisher's instructions.
Tasks it helps with
Share of each task's required capabilities it covers| Review pull requests Security Scanning | 50% |
| Scan code for vulnerabilities Security Scanning | 50% |
Similar tools
Listed for the same task: review pull requests- diffpilotREMOTELOCALMCP server for PR code review, commit messages, changelogs, and secret detection
- MCP Code Review ServerREMOTELOCALCode review as an MCP server — structured reviews with OWASP security scanning
- StrixREMOTELOCALAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
- Release AlertREMOTELOCALSearch packages across registries, and read their releases and CVEs
- Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
- agent-bomREMOTELOCALScan AI/MCP dependencies, descriptor injection, risky tool inputs and authentication configuration
Ready-made AI agents
- $20/mo
- $24/mo · free plan
- Cursor53$20/mo · free plan
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Install package | oxiploitability-mcp | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Package registries | cargo | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Local install (package) | yes | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Remote access (hosted) | no | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Repository | https://github.com/abelreqma/oxiploitability-mcp | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Version | 0.1.0 | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 1h ago |
Change history
- NEW23 Oct 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is Oxiploitability still online?
Free alerts · no accountQuestions about Oxiploitability
How do I connect Oxiploitability?
Install the cargo package oxiploitability-mcp. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What can I use Oxiploitability for?
Based on its description, it is most relevant to: review pull requests, scan code for vulnerabilities.