Excession Labs: CVE intelligence and security research
ai.excessionlabs/site
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/c27598ed-8fc0-48dd-aa4d-fea19d24ac53/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "ai.excessionlabs/site"
title: "Excession Labs: CVE intelligence and security research"
description: "Search CVEs, source software/version evidence, KEV, EPSS and public security research."
version: "1.3.0"
homepage_url: "https://excessionlabs.ai/cve-intelligence/"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "ai.excessionlabs"
display_name: "ai.excessionlabs"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://excessionlabs.ai/mcp"
endpoint_host: "excessionlabs.ai"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[10]
0{9}
name: "cve_changes"
title: "Read new and changed CVE records"
effect: "READ"
effect_confidence: 0.736
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.724
risk_severity: "INFO"
fingerprint: "517c7214b1670db53e1f9a385c51f893bef0e969383b49abd37c9424ecbc5da5"
input_schema_fingerprint: "040da69e41e7791d627937e5c840f9ad7b329a4a965c14c849457f480c96a9aa"
annotations{5}
title: "Read new and changed CVE records"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "cve_get"
title: "Get a CVE with source evidence"
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.724
risk_severity: "INFO"
fingerprint: "a61dc7c5e29792b1504dd8b70670291f881275e4bdcec1cda5387bbb1496d973"
input_schema_fingerprint: "cc67b986e73b32cba1bee2c290cbc14b97087937cbfc47ddebb00e806be02573"
annotations{5}
title: "Get a CVE with source evidence"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "cve_history"
title: "Read hosted CVE revision history"
effect: "READ"
effect_confidence: 0.809
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.765
risk_severity: "INFO"
fingerprint: "fd3d703dd8ce94a982f185210b8da56226d60c618803ffc6fea6a00aced2d728"
input_schema_fingerprint: "6e126630e2852909b1ccd64691e7e447caecf90361e97c1c6908cb5bd1f601c6"
annotations{5}
title: "Read hosted CVE revision history"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "cve_search"
title: "Search CVEs and software versions"
effect: "EXECUTE"
effect_confidence: 0.6
capabilities[2]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.61
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.745
risk_severity: "CRITICAL"
fingerprint: "74c50f0756562043138eea58becf48f7477f227f4bcfd4435d7a5c4ef1dc08eb"
input_schema_fingerprint: "73d902b5596857bd77c7a0ebff5e8250c739f77f8344dbcc7634bb343b46f1cb"
annotations{5}
title: "Search CVEs and software versions"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "cve_sources"
title: "List vulnerability data sources"
effect: "READ"
effect_confidence: 0.736
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.675
risk_severity: "INFO"
fingerprint: "ed7fb2b82b9f528923b1ca24891636b7f10683bdc38beae86fbe1f525f224e03"
input_schema_fingerprint: "d746974fa9afd5e951f76f9af38954b0ad7f436f2120dc974da65e5ee39f856f"
annotations{5}
title: "List vulnerability data sources"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "cve_status"
title: "Check CVE collection health"
effect: "READ"
effect_confidence: 0.736
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.675
risk_severity: "INFO"
fingerprint: "141d290161deaf8c59c0c42a25bb0c6b65ad1ed284ee5b891c007cab3535d8eb"
input_schema_fingerprint: "d746974fa9afd5e951f76f9af38954b0ad7f436f2120dc974da65e5ee39f856f"
annotations{5}
title: "Check CVE collection health"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "get_page"
title: "Get a page as Markdown"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "9fd31bfe0b417f290d4b8c9921d9c29590e8291abd1df1983fcf947553e9acea"
input_schema_fingerprint: "979cd6183dda562856560bfa52ce22cabf47f1e93b32bddf0460e1de3e4ef844"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "how_to_contact"
title: "How to contact Excession Labs"
effect: "READ"
effect_confidence: 0.56
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.883
risk_severity: "LOW"
fingerprint: "7c2ebd5998f815af731ecf089579e86404b953da3c738676c9eb2b71049f7f1f"
input_schema_fingerprint: "99334726611ccf58a148b0814696bfa6fe08c1b2d027e946beccf5a74331c9aa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "request_security_test"
title: "Request a security test from Excession Labs"
effect: "WRITE"
effect_confidence: 0.902
capabilities[4]
0{2}
capability: "EMAIL"
confidence: 0.601
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.746
2{2}
capability: "PERSONAL_DATA"
confidence: 0.964
3{2}
capability: "SECURITY_CONTROL"
confidence: 0.883
risk_severity: "MEDIUM"
fingerprint: "a40fc19a596a21b8feefa219b825c8befaffde594f1192c13abec9afe43088dc"
input_schema_fingerprint: "cd9c16c5592fb72968cce1b5c743cab81935ba5cb0e9dd55ef7a2bc00f0b35f6"
annotations{5}
title: null
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
9{9}
name: "search_site"
title: "Search excessionlabs.ai"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "f3ad4b4301868fef4f7c5ae5d626631a9544551785e9f869edc389de052d3a23"
input_schema_fingerprint: "73cac787af9dcac7fad6d2b6a4d6f4acba2d226fb8f172e93f3068e58888a0b5"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "excessionlabs.ai"
registrable_domain: "excessionlabs.ai"
source: "transport"
findings[6]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "cve_search"
3{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "request_security_test"
4{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "request_security_test"
5{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "cve_search"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "ai.excessionlabs/site"
registry_content_sha256: "31b8aa7d607ec8418c7b380535aee3fb30dfa0e267dace6aa7ab8a95c0b9868c"
scan_snapshot_fingerprint: "00df3ca4e112ed96e5b4c71002ad8531abc5e173f77ebb6cd82712df47653c4e"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:38:22.836Z"
observed_at: "2026-11-12T15:03:27.89+00:00"
registry_published_at: "2026-11-12T13:49:39.370943+00:00"
registry_updated_at: null