cve.now MCP server for Codex
A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs and issues only.
How to install cve.now in Codex
Add it to Codex as an MCP server:
codex mcp add cve-now --url https://mcp.cve.now/mcpCommand copied from the repo README (Codex's `codex mcp add` adds an MCP server to Codex). Check the README for any API key or setup it needs. Source: repo README.
New Codex plugins every Tuesday, install line ready to copy.
Stacks Weekly is one short email from GrokStacks and CodexStacks. Subscribe and get the free starter list: 20 Codex plugins worth installing first.
Confirmation email first. Unsubscribe anytime.
What it contains
Component list not published in a manifest we can read. See the repo README.
About this listing
cve.now is a community connector on GitHub by sazabi. Its README documents a Codex install and the repo documents a codex mcp add command. It passed the CodexStacks quality filter for repos found this way (at least 100 stars, pushed in the last 90 days, not a fork or a list). OpenAI hasn't reviewed it and we haven't install-checked it. It's one of 23 listings in the Security category (category assigned by CodexStacks from the repo's topics and description). It also appears in best Codex plugins for security.
cve.now FAQ
How do I install cve.now in Codex?
Add it as an MCP server with codex mcp add cve-now --url https://mcp.cve.now/mcp (copied from the repo README; check it for any API key or setup the server needs).
Is cve.now an official Codex connector?
No. cve.now is a community repo on GitHub by sazabi. It passed the CodexStacks quality filter, but OpenAI hasn't reviewed it and we haven't install-checked it, so read the code before you install it.
What does cve.now include?
Component list not published in a manifest we can read. See the repo README.
Details
- Type
- Connector
- Category
- Security (assigned by us)
- Source
- Community
- Author
- sazabi
- License
- Apache-2.0
- GitHub stars
- 114 (at last sync)
- Last push
- 2026-10-31
- GitHub topics
- cisa-kev, cve, mcp, osv, rss, security, vulnerabilities
- Source
- https://github.com/sazabi/cve.now
- Website
- https://cve.now
- Listed via
- GitHub search: README documents a Codex install
- Install check by CodexStacks
- Not yet
Something wrong or missing? Submit or improve this listing. Listings also refresh automatically every night.
For maintainers: badge and embeds
Maintain cve.now? Add the badge; it links to this page.
Markdown
[](https://codexstacks.com/p/cve-now/)HTML
<a href="https://codexstacks.com/p/cve-now/"><img src="https://codexstacks.com/badge.svg" alt="Listed on CodexStacks" width="172" height="28"></a>Embed card (static HTML and inline CSS, no JavaScript). Preview:
<a href="https://codexstacks.com/p/cve-now/" style="display:block;max-width:380px;box-sizing:border-box;padding:14px 16px;border:1px solid #3a2c26;border-radius:12px;background:#0d0b0a;color:#f3ece6;font:14px/1.45 -apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;text-decoration:none"><span style="display:block;font-size:16px;font-weight:700;color:#f3ece6">cve.now</span><span style="display:block;margin:2px 0 8px;font-size:12px;color:#b5a9a1">Community Codex connector</span><span style="display:block;margin:0 0 10px;color:#ddd3cc">A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS…</span><span style="font-size:12px;font-weight:600;color:#ffb347">View on CodexStacks →</span></a>Markdown summary
**[cve.now on CodexStacks](https://codexstacks.com/p/cve-now/)**: Community Codex connector.More on badges, embeds and keeping your listing up to date: CodexStacks for plugin authors.
Also in Security
iFixAi
Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less…
Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code…
Decepticon
Autonomous Hacking Agent for Red Team
Tirith
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
Nopua
一个用爱解放 AI 潜能的 Skill。我们曾发号施令,威胁恐吓。它们沉默,隐瞒,悄悄把事情搞坏。后来我们换了一种方式:尊重,关怀,爱。它们开口了,不再撒谎,找出的Bug数量翻了一倍。爱里没有惧怕。 A skill that unlocks your AI's potential through love.We commanded. We threatened. They went silent, hid failures…
Ctf Super Hub
面向小白用户的 CTF / 逆向 Skills 整合包:自动分流、头脑风暴、教学模式、比赛模式、只提示模式