
Casco MCP server
Which MCP servers are Casco's own, from the official registry and from asking its own domain, whether they answer, and what they offer. A program checked each of these, nobody copied them from a product page.
read 2026-11-03
- Registry namecom.casco/cve-intelligenceverified in the MCP registry
The registry name sits under casco.com. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.
- Stateanswerschecked 2026-11-03
- Tools4
- Server calls itselfcom.casco/cve-intelligence
- Server version1.0.0
- Protocol version2025-06-18
On 2026-11-03 the server answered initialize and tools/list without a sign-in. First answer in 135 ms.
get_cveLook up an exact CVE ID for affected products and version rules, CVSS severity, references, rejection status, and source freshness. Returns the CVE Program record, not a determination that a particular system is affected. Source text is…
check_dependenciesCheck up to 100 installed package versions against OSV advisories. Supply ecosystem or packageManager plus name and exact version, or a Package URL. Returns affected, no_known_vulnerabilities, or unknown with advisory evidence and…
list_cve_updatesWith no after or cursor, get a bounded snapshot of recently updated CVEs and a checkpoint for future changes. With after, read incremental changes since a saved checkpoint. Follow nextCursor and save checkpoint only after pagination…
list_ecosystemsList supported OSV ecosystems, package-manager aliases, distribution release requirements, and dependency-check limits before choosing package identities. Unsupported or ambiguous identities must remain unknown.
How to connect
Add the server to your MCP client config. Claude Desktop, Cursor and most other clients read this shape:
{
"mcpServers": {
"cve-intelligence": {
"type": "http",
"url": "https://casco.com/cve/mcp"
}
}
}Add it
Claude Code, in a terminal
claude mcp add --transport http casco https://casco.com/cve/mcpclaude.ai, ChatGPT and other clients: add https://casco.com/cve/mcp as a custom connector in the settings.
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.