Excession Labs: CVE intelligence and security research
ai.excessionlabs/siteVersion 1.3.0Search CVEs, source software/version evidence, KEV, EPSS and public security research.
Status
Responds645 msAnswered our handshake without sign-in.- Last checked
- Nov 14, 2026, 13:29 UTC
- Latency
- 645 ms
- Remotes responding
- 1 of 1
- Sign-in
- No sign-in
- Hosting
- Hosted outside the EU (detected)
- Registry data as of
- Nov 14, 2026, 22:14 UTC
Data from the official MCP Registry, checked by run.zero. How we check
Connect
Streamable HTTP
https://excessionlabs.ai/mcpResponds645 msNo sign-in
Claude Code
claude mcp add --transport http site https://excessionlabs.ai/mcpClaude Desktop and claude.ai
Settings > Connectors > Add custom connector
Name: site
Remote MCP server URL: https://excessionlabs.ai/mcpCursor
{
"mcpServers": {
"site": {
"url": "https://excessionlabs.ai/mcp"
}
}
}VS Code
code --add-mcp '{"name":"site","type":"http","url":"https://excessionlabs.ai/mcp"}'Built your own server? run.zero hosts MCP servers on European infrastructure.
Tools
10 tools
Read-only | Idempotent | Open world | ||
|---|---|---|---|---|
cve_changesRead hosted changes after a saved sequence cursor. Process the page before resuming with next_after. This is a read-only feed; it does not create a notification subscription. | No | Yes | Yes | No |
cve_getRead a CVE's descriptions, severity, affected software/version evidence, source references, KEV and EPSS. Large affected-software lists are paginated; inspect the returned cursor and completeness fields. | No | Yes | Yes | No |
cve_historyRead normalized source revisions retained after hosted monitoring starts. Version claims can refer to shared affected_groups by group_id. Initial hosted observations establish a baseline; the initial snapshot is not a complete historical archive. Inspect returned coverage and pagination. | No | Yes | Yes | No |
cve_searchSearch the hosted Excession Labs CVE database. Choose recent modification, new publication, or known-exploitation priority. Software/version filters match source assertions; they do not evaluate whether an installation is affected. | No | Yes | Yes | No |
cve_sourcesRead the hosted source catalog, attribution, update methods and coverage limits. | No | Yes | Yes | No |
cve_statusRead corpus counts, source coverage, collection errors, freshness and saved update checkpoints. A successful bounded query does not imply complete upstream coverage. | No | Yes | Yes | No |
get_pageRead one public page of excessionlabs.ai as Markdown. Use a path from search_site or llms.txt. | No | Yes | Yes | No |
how_to_contactReturn the ways a person can contact Excession Labs: the request form, email, and the request_security_test tool for agents. | No | Yes | Yes | No |
request_security_testSend a request for a security test (web application, API, multi-tenant SaaS isolation or AI application) to Excession Labs on behalf of a person who asked for it. Needs an agent key (POST https://excessionlabs.ai/agent/auth, then Authorization: Bearer <key>). Excession Labs replies to the person by email to agree scope; testing starts only after a written scope and written authorization from the system owner. Never include passwords, API keys or customer data. Limits: 5 requests a day per key, 3 a day per email address. | No | No | No | Yes |
search_siteSearch the public pages and research notes on excessionlabs.ai. Returns titles, URLs and one-line summaries. | No | Yes | Yes | No |
Details
- Registry status
- Active
- Published
- Nov 12, 2026
- Updated
- Nov 12, 2026
- Repository
- Not given
- Categories (suggested)
- SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
- GDPR
- Not declared