cve.now by Sazabi provides a free public vulnerability feed, CVE/GHSA/OSV lookups, and exact package-version checks against its indexed catalog. No authentication required. No matches do not guarantee safety; model-written summaries are labeled and published under CC-BY 4.0, while upstream data retains its own licensing and attribution.
Check exact package versions against cve.now's synced vulnerability catalog using a lockfile or package list. Inputs are sent to cve.now; avoid including secrets or private dependency details without authorization. No matches means none in this catalog, not a guarantee of safety.
Get one vulnerability entry by CVE, GHSA or OSV id, as JSON.
List the newest items in a cve.now feed (critical, all, kev, tech/<slug>, ecosystem/<eco>).
The cve.now MCP integration connects your Dench AI CRM directly to cve.now MCP, so agents can read and act on your cve.now MCP data as part of everyday work — answering questions in chat, keeping your CRM in sync, and running automations without anyone copying data between tools.
3 actions are available for agents to invoke on your behalf. Every call runs through cve.now MCP's own authorization, scoped to the account you connect.
Sign in to your Dench workspace and open Integrations.
Find cve.now MCP and click Connect — you'll authorize access through cve.now MCP's own sign-in flow. No API keys or code required.
Ask an agent to use cve.now MCP in chat, or call it from an automation.
Manage or disconnect the connection any time from workspace settings.
The Dench cve.now MCP integration connects your AI CRM to cve.now MCP, so AI agents can work with your cve.now MCP data as part of chats, automations, and CRM workflows. You connect your account once, and every agent in your workspace can use it — governed by your workspace permissions.
The cve.now MCP integration currently exposes 3 actions, including Check stack, Get vulnerability, and List feed. Agents invoke them on your behalf from chat or from automations.
No. You connect cve.now MCP from your Dench workspace using cve.now MCP's own sign-in and authorization flow — no API keys to copy, no glue code to maintain.
Connections are authorized through cve.now MCP's own authentication flow, and Dench stores only the authorization needed to act on your behalf. You can review and disconnect the cve.now MCP connection from your workspace settings at any time.