How to Install Excession Labs CVE intelligence in Cursor
Search CVEs and source software/version evidence, with CISA KEV and dated FIRST EPSS.
What Excession Labs CVE intelligence does
Excession Labs hosts a public CVE intelligence MCP connector with six read-only tools. Search by text, vendor, product, package, ecosystem or a literal source version. Read CVE details, source references, affected-software evidence and available CISA KEV and dated FIRST EPSS data. Check source coverage and collection health, page through hosted revisions, or read changes after a saved cursor. Connect to https://excessionlabs.ai/mcp/cve over Streamable HTTP; no account or API key is required. Version filters match source assertions and do not evaluate whether an installed version falls within a vulnerability range. NVD and GitHub enrichment can be incomplete. Hosted history starts at the displayed cutover date; initial observations establish a monitoring baseline. The public MIT repository contains documentation and tool schemas. The hosted implementation is maintained separately.
Installation steps
- 1Copy the config below
- 2Open or create .cursor/mcp.json
- 3Paste inside "mcpServers": {}
- 4Restart Cursor or reload the window
Configuration
File location: .cursor/mcp.json (project) or ~/.cursor/mcp.json (global)
{
"excessionLabsCveIntelligence": {
"url": "https://excessionlabs.ai/mcp/cve"
}
}Install in other clients
For maintainers
If you maintain Excession Labs CVE intelligence, add this badge to your README to show it's verified on CuratedMCP:
[](https://www.curatedmcp.com/marketplace/excession-labs-cve-intelligence)