Prototype · Preview: every server in the official registry, synced every 30 minutes. Reviews and accounts come in a later step.
PopNx MCPMCP servers for people who use AI · explained in plain words

UK Data: CVEs and package popularity

by reliness.co.ukversion 1.5.0i★ –iRuns in the cloud
Registry nameuk.co.reliness/dev-security

Install

Overview

Description from the maker (original English)

Software vulnerabilities (CVEs) from the US NVD and package downloads for npm, PyPI and crates

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

  • Connection: Runs in the cloud
  • Transport: Streamable HTTP
  • Category: Cybersecurity
  • You need to fill in: Authorization

Install

Pick the AI app you use, then copy the settings.

Before you install

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

Which app do you use?

Pick your app above. We remember it, so next time the button says “Install in …”.

This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.

Run this in your terminal

claude mcp add --transport http dev-security https://ukdata.reliness.co.uk/mcp/dev-security --header 'Authorization: your-value'

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "dev-security": {
      "url": "https://ukdata.reliness.co.uk/mcp/dev-security",
      "headers": {
        "Authorization": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "dev-security": {
      "type": "http",
      "url": "https://ukdata.reliness.co.uk/mcp/dev-security",
      "headers": {
        "Authorization": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

  • Authorization secret HTTP header
    Optional. Bearer for more than the free daily allowance; free key from POST https://ukdata.reliness.co.uk/keys

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Tool names and descriptions exactly as the server reported them on Nov 8, 2026. The maker wrote them, not us; we show them as plain text.

  • cve_lookup

    Details of one specific CVE by its ID (e.g., CVE-2021-44228). Returns the vulnerability description, CVSS score, severity, published/modified dates, weakness type (CWE), and reference links for fixes or advisories from the NIST National Vulnerability Database. (cost: 1 credit)

  • npm_stats

    Get download statistics for a JavaScript package on the npm registry. Returns the total download count for the last week to gauge popularity and usage trends. (cost: 1 credit)

  • pypi_stats

    Get download statistics for a Python package from PyPI. Returns recent download counts for the last day, week, and month to measure library adoption. (cost: 1 credit)

  • crate_stats

    Get download statistics and metadata for a Rust crate from crates.io. Returns total and recent download counts along with the latest version number. (cost: 1 credit)

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 8, 2026

  • ! Caution

    Maker matches the repo

    The registry lists no source repo, so we cannot match the publisher (reliness.co.uk) to the code

  • … Not checked yet

    Still maintained

    We have not read this repo from GitHub yet

  • … Not checked yet

    Has a licence

    We have not read this repo from GitHub yet

  • ✓ Pass

    Endpoint responds

    Responded in 17 ms (HTTP 200)

  • – Not applicable

    Sign-in with OAuth

    No sign-in needed

  • ✓ Pass

    No hidden instructions in tool descriptions

    Read 4 tool descriptions and found no hidden instructions to the AI

Compared with others in Cybersecurityi

  • More stars than 0% of the other 1000 servers in this category
  • Published to the registry more recently than 97% of the other 1000 servers in this category
  • Basic checks equal to or better than 32% of the other 1000 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is UK Data: CVEs and package popularity safe?

It passed 2 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: Authorization

Does it run on my computer or in the cloud?

It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.

Is it still maintained?

The GitHub repo last changed –, and the latest version (1.5.0) reached the registry yesterday.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.

What can I use instead?

In the same category: Phishnoo Sandbox, Zovo Dependency Audit, TeamOnly

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Phishnoo Sandbox

Explore synthetic security awareness metrics and file example threat reports.

by api.phishnoo.nlEarlyUpdated today

Runs in the cloud✓ api.phishnoo.nl

Zovo Dependency Audit

Audit a dependency list for known vulnerabilities, licenses and outdated versions.

by theluckystrikeEarlyUpdated today

Runs in the cloud

TeamOnly

Deploy AI-built internal apps behind your company login, with a database, files and secrets.

by sohelsdVery new↓ 315/wkUpdated today

Runs on your computer✓ teamonly.dev

README from the maker

No README found in the repo

Ask PopNx