get_cve
Get a CVE by its id.
idrequireddev.releasealertPublished by releasealert.devOfficial publisherv1.0.0Updated Oct 25, 2026
Search packages across registries, and read their releases and CVEs.
Release Alert's hosted MCP server (releasealert.dev), published by releasealert.dev; no sign-in required; Streamable HTTP; 6 tools.
No AI overview yet: these facts come from the registry entry and the server itself.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/dev.releasealert%2Fmcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"release-alert": {
"type": "http",
"url": "https://releasealert.dev/mcp"
}
}
}Get a CVE by its id.
idrequiredGet a project by its registry and name.
namerequiredregistryrequiredList the CVEs that affect a project, newest first.
namerequiredregistryrequiredList a project's releases, newest first.
namerequiredpageversionregistryrequiredList the registries Release Alert tracks. A registry's id is what search and the project tools take.
Takes no parameters.
Search for a project by its name, optionally followed by a version, or by its URL, or for a CVE by its id. Each project found carries the registry and name the project tools take.
queryrequiredregistry83% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.