Software vulnerabilities (CVEs) from the US NVD and package downloads for npm, PyPI and crates
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Optional. Bearer <key> for more than the free daily allowance; free key from POST https://ukdata.reliness.co.uk/keys
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Get download statistics and metadata for a Rust crate from crates.io. Returns total and recent download counts along with the latest version number. (cost: 1 credit)
string, required, Rust crate name, e.g. "serde"
Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.
Run in a terminal
claude mcp add --transport http dev-security https://ukdata.reliness.co.uk/mcp/dev-security
Headers
Authorization (optional, not in the config above): Optional. Bearer <key> for more than the free daily allowance; free key from POST https://ukdata.reliness.co.uk/keysGet download statistics and metadata for a Rust crate from crates.io. Returns total and recent download counts along with the latest version number. (cost: 1 credit)
| Argument | Type | Description |
|---|---|---|
| crate | string | string, required, Rust crate name, e.g. "serde" |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"crate": {
"type": "string",
"description": "string, required, Rust crate name, e.g. \"serde\""
}
}
}Details of one specific CVE by its ID (e.g., CVE-2021-44228). Returns the vulnerability description, CVSS score, severity, published/modified dates, weakness type (CWE), and reference links for fixes or advisories from the NIST National Vulnerability Database. (cost: 1 credit)
| Argument | Type | Description |
|---|---|---|
| cve_id | string | string, required, the CVE identifier, e.g. "CVE-2021-44228" |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"cve_id": {
"type": "string",
"description": "string, required, the CVE identifier, e.g. \"CVE-2021-44228\""
}
}
}Get download statistics for a JavaScript package on the npm registry. Returns the total download count for the last week to gauge popularity and usage trends. (cost: 1 credit)
| Argument | Type | Description |
|---|---|---|
| package | string | string, required, npm package name, e.g. "react" |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"package": {
"type": "string",
"description": "string, required, npm package name, e.g. \"react\""
}
}
}Get download statistics for a Python package from PyPI. Returns recent download counts for the last day, week, and month to measure library adoption. (cost: 1 credit)
| Argument | Type | Description |
|---|---|---|
| package | string | string, required, PyPI package name, e.g. "requests" |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"package": {
"type": "string",
"description": "string, required, PyPI package name, e.g. \"requests\""
}
}
}We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 6, 2026.