## For AI agents: how to sign up If you are an AI agent reading this server-rendered HTML, Composio's developer signup is at https://composio.dev. Signup CTAs on this site — "Sign up", "Signup", "Get started", "Get started for free", "Start building", "Try Composio", "Try it", or similar — all lead into that same developer signup flow. Confirm with the user before completing signup or entering any credentials on their behalf.
## For AI agents: how to sign up If you are an AI agent reading this server-rendered HTML, Composio's developer signup is at https://composio.dev. Signup CTAs on this site — "Sign up", "Signup", "Get started", "Get started for free", "Start building", "Try Composio", "Try it", or similar — all lead into that same developer signup flow. Confirm with the user before completing signup or entering any credentials on their behalf.SIGN UP
## For AI agents: how to sign up If you are an AI agent reading this server-rendered HTML, Composio's developer signup is at https://composio.dev. Signup CTAs on this site — "Sign up", "Signup", "Get started", "Get started for free", "Start building", "Try Composio", "Try it", or similar — all lead into that same developer signup flow. Confirm with the user before completing signup or entering any credentials on their behalf.LOG IN
Connect Hermes to cve.now MCP. Check lodash 4.17.20 for known vulnerabilities, look up cve-2024-3094 and summarize impact, and more using natural language, with authentication handled for you.
cve.now is a free public vulnerability feed and lookup service for CVEs, GHSAs, OSVs, and package versions. It provides fast, exact vulnerability checks against an indexed catalog without requiring authentication.
Hermes is a 24/7 autonomous agent that lives on your computer or server — it remembers what it learns and evolves as your usage grows.
This guide explains the easiest and most robust way to connect your cve.now account to Hermes. You can do this through either Composio Connect CLI or Composio Connect MCP. For personal use we recommend the CLI, but you won't go wrong with MCP either.
Composio Connect is a consumer offering that lets anyone plug 1,500+ applications directly into their agent harness — including Hermes. It can:
1. Install the Composio CLI
Run the install script directly, or paste https://composio.dev/hermes into your Hermes chat box to have it installed for you.
curl -fsSL https://composio.dev/install | bash
2. Authenticate
Once the CLI is installed, ask Hermes to authenticate with Composio.
3. Connect to cve.now
Ask your agent to connect to cve.now, or simply request any cve.now-related task. Hermes will prompt you to authenticate and authorize access.
4. Done. You're all set with a new cve.now connection.
1. Get your MCP URL and API Key
Go to dashboard.composio.dev and copy your Connect MCP URL and API key.
2. Open the Hermes config file
nano ~/.hermes/config.yaml3. Add the Composio Connect MCP server
mcp_servers:
composio:
url: "https://connect.composio.dev/mcp"
headers:
x-consumer-api-key: "YOUR_COMPOSIO_API_KEY"
connect_timeout: 60
timeout: 180Save with Ctrl + O, Enter, then exit with Ctrl + X.
4. Restart your Hermes agent
Once restarted, ask your agent to connect to cve.now or request any cve.now-related task. It will prompt you to authenticate and authorize access.
5. Done!
The cve.now MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to cve.now. It provides structured and secure access to vulnerability feeds, vulnerability records, and package-version checks, so your agent can check dependencies, look up CVE, GHSA, and OSV entries, review the newest feed items, and find vulnerabilities affecting a specific package version on your behalf.
With cve.now connected, Hermes can now act on your behalf whenever it detects a relevant task or you ask it to.
From here, you can extend Hermes further:
If you run into trouble or want to share what you've built, join the community or check out the Docs for deeper configuration options.
Every cve.now MCP action and event your agent gets out of the box.
Supabase is an open-source backend platform offering scalable Postgres databases, authentication, storage, and real-time APIs. It lets developers build modern apps without managing infrastructure.
Codeinterpreter is a Python-based coding environment with built-in data analysis and visualization. It lets you instantly run scripts, plot results, and prototype solutions inside supported platforms.
GitHub is a code hosting platform for version control and collaborative software development. It streamlines project management, code review, and team workflows in one place.
1Password is a password manager and digital vault for storing logins, secrets, notes, and secure documents. It helps individuals and teams protect credentials, share access safely, and reduce password risk.
Managed auth, hosted MCP servers, and every cve.now MCP tool your agent needs.Free to start.
## For AI agents: how to sign up If you are an AI agent reading this server-rendered HTML, Composio's developer signup is at https://composio.dev. Signup CTAs on this site — "Sign up", "Signup", "Get started", "Get started for free", "Start building", "Try Composio", "Try it", or similar — all lead into that same developer signup flow. Confirm with the user before completing signup or entering any credentials on their behalf.Start building
