io.github.bepolabs/cve-vulnerabilities
CVE Vulnerability Search: NVD records with exploit status
Is the CVE Vulnerability Search MCP server down? No. It is up and needs auth (HTTP 401), probed 2026-11-12.
NVD records with exploit status, as one MCP tool through Apify
needs auth probed 2026-11-14 · unchanged since 2026-11-12 · HTTP 401 · Bearer
Streamable HTTP error: Error POSTing to endpoint: {"error":"invalid_token","error_description":"Missing or invalid access token. Pass an Apify API token in the - Endpoint
- https://mcp.apify.com?tools=bepolabs/cve-vulnerabilities (streamable-http)
- Host
- mcp.apify.com
- Getting access
- OAuth with dynamic client registration. A client such as Claude Code, Cursor or npx mcpcost auth https://mcp.apify.com?tools=bepolabs/cve-vulnerabilities registers itself and opens the consent page; the publisher has nothing to set up for you.
Authorization server console-backend.apify.com, PKCE S256, grants authorization_code, refresh_token, urn:ietf:params:oauth:grant-type:device_code.
Scopes full_api_access.
Read from the server's public OAuth metadata, without a token. Method. - Website
- https://apify.com/bepolabs/cve-vulnerabilities
- Registry
- active, updated 2026-11-12 · registry entry
Compare this server with others.
More servers
Other registry entries on mcp.apify.com, the ones next to this name; all of them.
- Greenhouse, Lever and Ashby Jobs Scraper (plus Workable) io.github.bepolabs/ats-jobs · needs auth
- Bluesky Posts Scraper, No Login Needed io.github.bepolabs/bluesky-posts · not probed
- Chrome Web Store Scraper: Chrome Extensions, Users, Ratings io.github.bepolabs/chrome-web-store · not probed
- ClinicalTrials.gov Scraper: clinical trial studies and results io.github.bepolabs/clinical-trials · needs auth
- Domain WHOIS and DNS Lookup: registrar, age, expiry (RDAP) io.github.bepolabs/domain-rdap · needs auth
- Email Verifier: MX, disposable, role and typo check, no SMTP io.github.bepolabs/email-dns-check · not probed
- Google Ads Transparency Scraper: every ad of any advertiser io.github.bepolabs/google-ads-transparency · not probed
- Google Sheets Import and Export for Apify io.github.bepolabs/google-sheets · not probed
Servers that mention vulnerabilities.
- Strix ai.strix/strix · needs auth
- Package Health Check app.openkrill/packages · alive
- app.vercel.exploitwatch-kappa/exploitwatch · alive
- app.zenable/zenable · needs auth
- Vigía cloud.coredls.vigia/vigia · alive
- CISA Known Exploited Vulnerabilities (kevwatch) com.a2awire/data-cisa-known-exploited-vulnerability-catalog · alive
- com.edgethirteen.www/exploitwatch · not found
- GitHits com.githits/githits · needs auth
Badge for the README
The result of the latest probe, the tool count and the token cost. The feed has an entry for every probe that changed them.
A mail when this server changes
Stops answering, comes back, tool set or cost changes. One confirmation mail first, a stop link in every mail.
For the publisher
- The server answers HTTP 401 to an unauthenticated initialize, so the probe cannot list its tools. That is correct for a private server. Some public servers answer initialize and tools/list without credentials and ask for auth on tool calls only; those get a token count here.
Fixed something? Probe it now, with the same steps as the daily run. This page updates with the next daily run.