jonnybottles/patch-tuesday-mcp

Overview

An MCP server that queries Microsoft Patch Tuesday data, including MSRC security updates, CVEs, and KB articles. It enriches results with EPSS (Exploit Prediction Scoring System) and CISA KEV (Known Exploited Vulnerabilities) data. No API keys are required, and it works with any MCP-compatible client like Claude, Copilot, or Cursor.

Best for

Best for
Security engineers or IT administrators who need to quickly query and enrich Microsoft security updates within an MCP environment

Use cases

• Checking the latest Microsoft security patches and associated CVEs
• Enriching vulnerability data with EPSS and CISA KEV scores
• Integrating patch information into an MCP-based workflow or chatbot

Notes

An MCP server that queries Microsoft Patch Tuesday data, including MSRC security updates, CVEs, and KB articles. It enriches results with EPSS (Exploit Prediction Scoring System) and CISA KEV (Known Exploited Vulnerabilities) data. No API keys are required, and it works with any MCP-compatible client like Claude, Copilot, or Cursor.

2 stars on GitHub. Last updated 2026-07-12.

Use cases

• Checking the latest Microsoft security patches and associated CVEs
• Enriching vulnerability data with EPSS and CISA KEV scores
• Integrating patch information into an MCP-based workflow or chatbot

Pros

• No API keys or authentication needed to use
• Compatible with multiple MCP clients (Claude, Copilot, Cursor, etc.)
• Includes both EPSS and CISA KEV enrichment for risk context

Cons

• Limited to Microsoft Patch Tuesday data only
• Requires an MCP-compatible client, not a standalone tool
• Low GitHub stars (2) suggest limited community adoption or testing

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.