ENFR
List your agent

P0: CVE, package and domain checks

MCP server · hosted · v1.0.0 · dev.workers.x402-bazaar-rank-worker.x402-bazaar-rank/cve-package-domain-security
Online · tested 51m agoNEW · 2h agoSeen in the registry 1h ago

CVE with EPSS and CISA KEV, package risk, software EOL, domain and IP reports, pay per call

Website ↗How to connect ↓

What it does

P0: CVE, package and domain checks is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.

From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as review pull requests or scan code for vulnerabilities.

Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.

At a glance

Hosted (remote)YES
Local installNO
Version1.0.0
PriceNot in the registry
First seen07 Nov 2026
Last checked1h ago

How to connect

As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 51m ago (live check)

Hosted endpoint

  • https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security streamable-http

In Claude Code: claude mcp add --transport http p0-cve-package-and-domain-checks https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security

MCP settings (Claude Desktop, Cursor and other MCP clients)

{
  "mcpServers": {
    "p0-cve-package-and-domain-checks": {
      "url": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security"
    }
  }
}

Live check

Electra Index connected to the hosted endpoint 51m ago

ONLINE P0: CVE, package and domain checks answered an MCP connection on 07 Nov 2026 and introduced itself as cve-package-domain-security 0.2.0 (MCP protocol 2025-06-18).

9 tools offered to AI assistants

  • vuln_cve · Use when you need to triage a CVE: description, CVSS score and severity with the publisher named, dates, CWE, key references, FIRST EPSS probability with 30-day series and CISA KEV status. Returns the exact paid x402 request for your input
  • vuln_kev_new · Use when you track exploited vulnerabilities: CVEs CISA added to its Known Exploited Vulnerabilities catalog since a date (since=YYYY-MM-DD), newest first, with date added, due date, vendor, product. Returns the exact paid x402 request for
  • package_risk · Use when you must vet a dependency before installing or shipping it: pass ecosystem (npm, PyPI, Go, crates.io, RubyGems, Maven, NuGet). Returns the exact paid x402 request for your input (GET /package/risk, $0.005 per call), with a link to
  • software_eol · Use when you must know if a software version is still supported: pass product (python, nodejs, ubuntu, postgresql, ...) and version (3.8.10) for its release cycle, end-of-life date, supported flag. Returns the exact paid x402 request for yo
  • domain_report · Use when you need one report on a domain: DNS records (A, AAAA, MX, NS, TXT, CAA) with SPF and DMARC parsed, RDAP registration for .com, .net and .org (registrar, dates, status, nameservers, DNSSEC). Returns the exact paid x402 request for
  • domain_report_batch · Use when you must vet several domains at once (vendors, leads, lookalikes): up to 10 domains in one POST, each answered exactly like /domain/report. Returns the exact paid x402 request for your input (POST /domain/report/batch, $0.05 per ca
  • ip_passport · Use when you must profile an IP address in one call: ASN, AS name and country of its announced range, whether it is a current Tor exit node, and whether it lies in a public cloud range. Returns the exact paid x402 request for your input (GE
  • check_infra · Use when you must check infrastructure in one call: any of ip (ASN, Tor exit, cloud range), domain (status, TLS, robots), cve (CVSS, EPSS, CISA KEV). Returns the exact paid x402 request for your input (GET /check/infra, $0.015 per call), wi
  • site_snapshot · Use when you need a health and content snapshot of your own website: HTTP status, final URL, TLS, server, robots.txt and sitemap, plus WordPress REST. Returns the exact paid x402 request for your input (GET /site/snapshot, $0.005 per call),

What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method

Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.

Tasks it helps with

Share of each task's required capabilities it covers
Review pull requests
Security Scanning
50%
Scan code for vulnerabilities
Security Scanning
50%

Similar tools

Listed for the same task: review pull requests

Ready-made AI agents

An MCP server is a connector you add to your own assistant. These are finished products that do the same job for you:
All AI agents to review pull requests, ranked →

Facts & evidence

Each fact shows where it was seen and when.
FactValueEvidenceSourceLast confirmed
Hosted endpointhttps://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-securityDECLAREDSRC-001 Official MCP Registry1h ago
Local install (package)noDECLAREDSRC-001 Official MCP Registry1h ago
Remote access (hosted)yesDECLAREDSRC-001 Official MCP Registry1h ago
Websitehttps://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/tools#cve-package-domain-securityDECLAREDSRC-001 Official MCP Registry1h ago
Registry statusactiveDECLAREDSRC-001 Official MCP Registry1h ago
Version1.0.0DECLAREDSRC-001 Official MCP Registry1h ago
MCP serveryesDECLAREDSRC-001 Official MCP Registry1h ago

Change history

  • NEW07 Nov 2026
    first seen in the index

Is this page accurate?

Flag it and our robot re-checks the official source. Reports never change a score.

Do you run P0: CVE, package and domain checks? Know when it stops answering

For publishers · optional

Its hosted endpoint can be monitored. Monitoring Pro connects every 30 minutes like an AI assistant, emails you within the hour when it stops answering, keeps a 90-day availability history and adds your answer rate to your badge.

Monitor P0: CVE, package and domain checksLaunch offer $39.99 once, for life instead of $9.99/month · All plans

Monitoring never changes a score or a rank.

Are you the publisher of P0: CVE, package and domain checks?

Free · show your listing

An independent listing builds trust with your buyers. Announce it, and add the badge to your website or README.

Announce it on LinkedInListed on Electra Index
<a href="https://electraindex.com/mcp/p0-cve-package-and-domain-checks?utm_source=badge&utm_medium=share&utm_campaign=listing"><img src="https://electraindex.com/api/badge/p0-cve-package-and-domain-checks" alt="Listed on Electra Index"></a>

Questions about P0: CVE, package and domain checks

How do I connect P0: CVE, package and domain checks?

Use the hosted endpoint https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.

What tools does P0: CVE, package and domain checks offer?

When Electra Index connected on 07 Nov 2026, it listed 9 tools: vuln_cve, vuln_kev_new, package_risk, software_eol, domain_report, domain_report_batch, ip_passport, check_infra and more. The full list is in "Live check" above.

Is P0: CVE, package and domain checks online?

Yes. Its hosted endpoint answered an MCP connection from Electra Index 51m ago.

What can I use P0: CVE, package and domain checks for?

Based on its description, it is most relevant to: review pull requests, scan code for vulnerabilities.