# How to connect cve.now MCP to Claude ```json { "title": "How to connect cve.now MCP to Claude", "toolkit": "cve.now MCP", "toolkit_slug": "cve_now_mcp", "framework": "Claude Cowork", "framework_slug": "claude-cowork", "url": "https://composio.dev/toolkits/cve_now_mcp/framework/claude-cowork", "markdown_url": "https://composio.dev/toolkits/cve_now_mcp/framework/claude-cowork.md", "updated_at": "2026-10-24T05:31:45.652Z" } ``` ## Introduction Claude is Anthropic's AI assistant, available on the web, in the desktop app, and on mobile. Cowork is its agent for knowledge work, and it runs on all of those surfaces too. Connected to your apps, Claude can work with your files and services to accomplish complex tasks on your behalf. This guide walks you through the easiest and most secure way to connect your cve.now account to Claude via Composio Connect, enabling it to check lodash 4.17.20 for known vulnerabilities, look up CVE-2024-3094 and summarize impact, find recent vulnerabilities affecting your package version, and more such actions on your behalf without compromising your account security. Setup is the same on Claude Web, Desktop, and Cowork, and you only need to do it once. The connector is tied to your account, so it's available in all three. ## Also integrate cve.now MCP with - [ChatGPT](https://composio.dev/toolkits/cve_now_mcp/framework/chatgpt) - [Hermes](https://composio.dev/toolkits/cve_now_mcp/framework/hermes-agent) - [Atomic Agent](https://composio.dev/toolkits/cve_now_mcp/framework/atomic-agent) ## Connect cve.now MCP to Claude Cowork ### Connecting cve.now to Claude Web, Desktop, and Cowork Two ways to add the Composio connector. Pick whichever you prefer. ### 1. Add with one click Click the button. Claude opens with the Composio connector filled in. Click Add, then go to step 2. [Add to Claude](https://claude.ai/customize/connectors?modal=add-custom-connector&connectorName=Composio&connectorUrl=https%3A%2F%2Fconnect.composio.dev%2Fmcp) ### Add manually In Claude Desktop, click Customize in the left sidebar, then select Connectors and click the + icon at the top. Click Add custom connector and paste in the Composio MCP server URL: ```bash https://connect.composio.dev/mcp ``` ## What is the cve.now MCP server, and what's possible with it? The cve.now MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to cve.now. It provides structured and secure access to vulnerability feeds, vulnerability records, and package-version checks, so your agent can check dependencies, look up CVE, GHSA, and OSV entries, review the newest feed items, and find vulnerabilities affecting a specific package version on your behalf. - Dependency vulnerability checks: Have your agent check a lockfile or package list against cve.now's indexed catalog and identify matching vulnerabilities for exact package versions. - Vulnerability lookups: Direct your agent to retrieve a vulnerability entry by its CVE, GHSA, or OSV reference. - Latest vulnerability feeds: Let the agent review new items from the critical, all, or KEV feeds to help track recently published risks. - Technology and ecosystem monitoring: Instruct your agent to list feed items for a specific technology or package ecosystem. - Responsible result interpretation: Have your agent explain that no catalog matches do not guarantee safety and distinguish model-written summaries from upstream vulnerability data. ## Supported Tools | Tool slug | Name | Description | |---|---|---| | `CVE_NOW_MCP_CHECK_STACK` | Check stack | Check exact package versions against cve.now's synced vulnerability catalog using a lockfile or package list. Inputs are sent to cve.now; avoid including secrets or private dependency details without authorization. No matches means none in this catalog, not a guarantee of safety. | | `CVE_NOW_MCP_GET_VULNERABILITY` | Get vulnerability | Get one vulnerability entry by CVE, GHSA or OSV id, as JSON. | | `CVE_NOW_MCP_LIST_FEED` | List feed | List the newest items in a cve.now feed (critical, all, kev, tech/, ecosystem/). | ## Supported Triggers None listed. ## Troubleshooting ### 1. Why does Claude not use the Composio connector for cve.now? The connector can show as connected, but Claude must use it in each cve.now conversation. - Click + at the lower left of the chat, or type /. - Hover Connectors. - Turn on Composio. - Ask Claude to connect to cve.now again. ### 2. Why does Claude show an MCP server error before cve.now connects? Claude can show Couldn't reach the MCP server or Authorization with the MCP server failed when you add the connector for cve.now. - Check that the connector URL is https://connect.composio.dev/mcp. - Connectors run from Anthropic's cloud, so your device network is usually not the problem. - Add the connector again from Customize > Connectors, then ask Claude to connect cve.now. - If it fails again, send the error and the ofid_ reference id to support@composio.dev. ### 3. Why does the cve.now authorization link not work? The Composio connector is one server. Your cve.now account connects separately when Claude asks for it. - If the browser does not open, or the link expires, ask Claude to retry the cve.now connection. - Composio creates a fresh cve.now authorization link. - Open that link in your browser and finish the cve.now sign-in. ### 4. Why do cve.now actions fail after they worked before? The cve.now connection can expire or lose permission. - Ask Claude to inspect the cve.now connection. - If the connection is unhealthy, disconnect it when Claude prompts you. - Reconnect the cve.now account and retry the action. - If Claude shows a permission prompt, approve it before Claude changes data in cve.now. - If the action still fails with a permission error, check that the connected account has that permission in cve.now itself. ### 5. How do I switch to a different cve.now account? Claude can manage the cve.now connection for you. - Ask Claude to disconnect or delete the current cve.now account. - Ask Claude to connect cve.now again. - Open the new Composio authorization link for cve.now. - Sign in with the other cve.now account in the browser. - After the account connects, ask Claude to retry the cve.now task. ### 6. Why is my cve.now connection missing in Claude Desktop or on a Team plan? The connector belongs to your Claude account, so your cve.now connection works in Claude Web, Desktop, and Cowork. - In Claude Desktop, open Customize > Connectors. - Next to Composio, click ⋮ and click Clear cache. - If cve.now tools still do not appear, click ⋮, disconnect, remove the connector, and add it again. - On Team or Enterprise, an Owner or Primary Owner must enable the connector before you can connect cve.now. ## Creating MCP Server - Stand-alone vs Composio SDK The cve.now MCP server connects Claude Web, Desktop, and Cowork to your cve.now account through Composio. Once connected, Claude can use the available cve.now tools and triggers to complete tasks on your behalf. ## Complete Code None listed. ## How to build cve.now MCP Agent with another framework - [ChatGPT](https://composio.dev/toolkits/cve_now_mcp/framework/chatgpt) - [Hermes](https://composio.dev/toolkits/cve_now_mcp/framework/hermes-agent) - [Atomic Agent](https://composio.dev/toolkits/cve_now_mcp/framework/atomic-agent) ## Related Toolkits - [Supabase](https://composio.dev/toolkits/supabase) - Supabase is an open-source backend platform offering scalable Postgres databases, authentication, storage, and real-time APIs. It lets developers build modern apps without managing infrastructure. - [Codeinterpreter](https://composio.dev/toolkits/codeinterpreter) - Codeinterpreter is a Python-based coding environment with built-in data analysis and visualization. It lets you instantly run scripts, plot results, and prototype solutions inside supported platforms. - [GitHub](https://composio.dev/toolkits/github) - GitHub is a code hosting platform for version control and collaborative software development. It streamlines project management, code review, and team workflows in one place. - [1password](https://composio.dev/toolkits/_1password) - 1Password is a password manager and digital vault for storing logins, secrets, notes, and secure documents. It helps individuals and teams protect credentials, share access safely, and reduce password risk. - [Ably](https://composio.dev/toolkits/ably) - Ably is a real-time messaging platform for live chat and data sync in modern apps. It offers global scale and rock-solid reliability for seamless, instant experiences. - [Abuselpdb](https://composio.dev/toolkits/abuselpdb) - Abuselpdb is a central database for reporting and checking IPs linked to malicious online activity. Use it to quickly identify and report suspicious or abusive IP addresses. - [Alchemy](https://composio.dev/toolkits/alchemy) - Alchemy is a blockchain development platform offering APIs and tools for Ethereum apps. It simplifies building and scaling Web3 projects with robust infrastructure. - [Algolia](https://composio.dev/toolkits/algolia) - Algolia is a hosted search API that powers lightning-fast, relevant search experiences for web and mobile apps. It helps developers deliver instant, typo-tolerant, and scalable search without complex infrastructure. - [Anakin](https://composio.dev/toolkits/anakin_io) - Anakin is a web automation platform offering scraping, crawling, search, and browser automation. Use it to extract structured data, automate site tasks, and monitor web changes reliably. - [Anchor browser](https://composio.dev/toolkits/anchor_browser) - Anchor browser is a developer platform for AI-powered web automation. It transforms complex browser actions into easy API endpoints for streamlined web interaction. - [Apiflash](https://composio.dev/toolkits/apiflash) - Apiflash is a website screenshot API for programmatically capturing web pages. It delivers high-quality screenshots on demand for automation, monitoring, or reporting. - [Apiverve](https://composio.dev/toolkits/apiverve) - Apiverve delivers a suite of powerful APIs that simplify integration for developers. It's designed for reliability and scalability so you can build faster, smarter applications without the integration headache. - [Appcircle](https://composio.dev/toolkits/appcircle) - Appcircle is an enterprise-grade mobile CI/CD platform for building, testing, and publishing mobile apps. It streamlines mobile DevOps so teams ship faster and with more confidence. - [Appdrag](https://composio.dev/toolkits/appdrag) - Appdrag is a cloud platform for building websites, APIs, and databases with drag-and-drop tools and code editing. It accelerates development and iteration by combining hosting, database management, and low-code features in one place. - [Appveyor](https://composio.dev/toolkits/appveyor) - AppVeyor is a cloud-based continuous integration service for building, testing, and deploying applications. It helps developers automate and streamline their software delivery pipelines. - [Authyo](https://composio.dev/toolkits/authyo) - Authyo is a REST API service for passwordless authentication, OTP verification, session management, and transactional notifications. Use it to add secure login flows and user verification without building auth infrastructure from scratch. - [AWS Marketplace MCP](https://composio.dev/toolkits/aws_marketplace_mcp) - AWS Marketplace MCP provides MCP access to AWS Marketplace's cloud software, data, and services catalog. Use it to discover, compare, and evaluate 30K+ AWS Marketplace listings faster. - [Azure Monitor Activity Log](https://composio.dev/toolkits/azure_monitor_activity_log) - Azure Monitor Activity Log is Azure's service that records management and control-plane events for a subscription. Use it to audit changes, troubleshoot issues, and track resource operations across your Azure resources. - [Backendless](https://composio.dev/toolkits/backendless) - Backendless is a backend-as-a-service platform for mobile and web apps, offering database, file storage, user authentication, and APIs. It helps developers ship scalable applications faster without managing server infrastructure. - [Baserow](https://composio.dev/toolkits/baserow) - Baserow is an open-source no-code database platform for building collaborative data apps. It makes it easy for teams to organize data and automate workflows without writing code. ## Frequently Asked Questions ### What are the differences in Tool Router MCP and cve.now MCP? With a standalone cve.now MCP server, the agents and LLMs can only access a fixed set of cve.now tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from cve.now and many other apps based on the task at hand, all through a single MCP endpoint. ### Can I use Tool Router MCP with Claude Cowork? Yes, you can. Claude Cowork fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right cve.now tools. ### Can I manage the permissions and scopes for cve.now while using Tool Router? Yes, absolutely. You can configure which cve.now scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do. ### How safe is my data with Composio Tool Router? All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your cve.now data and credentials are handled as safely as possible. --- [See all toolkits](https://composio.dev/toolkits) · [Composio docs](https://docs.composio.dev/llms.txt)