Exploit Intelligence Platform

eip-mcp

The official MCP server for the Exploit Intelligence Platform.

PyPI release Supported Python versions Quality checks MIT License

Give an AI assistant bounded, source-attributed access to vulnerability intelligence, exploit artifacts, readable PoC source, Docker labs, discovery directories, STIX, and corpus statistics. Most users can connect to EIP's hosted MCP endpoint directly - there is no package or API key to install.

eip-mcp is read-only. It talks only to an EIP read API, the public one by default, exposes no download tool, never executes acquired content, and never claims that an exploit works, is verified, reliable, effective, or safe.

Connect

Recommended: hosted MCP

Clients supporting remote Streamable HTTP can connect directly to:

https://exploit-intel.com/mcp

In an MCP-capable application, add that URL as a remote Streamable HTTP server named EIP. If your assistant can configure integrations for you, tell it:

Add https://exploit-intel.com/mcp as a Streamable HTTP MCP server named EIP, then call get_corpus_readiness to verify the connection.

No local package, API key, or EIP account is required.

Optional: local Python package

Use the Python package when a client requires a local stdio command, or when you are self-hosting the HTTP transport. Python 3.12 or newer is required. Install the isolated application with pipx:

pipx install eip-mcp
eip-mcp --version

Then register it with your MCP client. A typical stdio configuration is:

{
  "mcpServers": {
    "eip": {
      "command": "eip-mcp"
    }
  }
}

Use the absolute path reported by command -v eip-mcp if the client does not inherit your shell PATH.

The local command connects to https://exploit-intel.com; no API configuration is needed.

Optional: Docker

Build the image directly from this checkout:

docker build -t eip-mcp .
docker run --rm -i eip-mcp

For a stdio MCP client, use docker as the command:

{
  "mcpServers": {
    "eip": {
      "command": "docker",
      "args": ["run", "--rm", "-i", "eip-mcp"]
    }
  }
}

Containerized Streamable HTTP operation is covered in the self-hosting guide.

What assistants can do

  • Search and inspect CVEs and GHSAs with affected products, version ranges, exploitation context, references, and accepted research
  • Search ExploitDB, Metasploit, curated repository PoCs, and repository candidates without inventing quality rankings
  • Search safely readable PoC source and inspect one bounded text file
  • Discover Docker/Compose labs and their stored, attributed analysis
  • Browse vendors, products, ecosystems, packages, official CWEs, and exploit contributors
  • Retrieve API-owned STIX 2.1 bundles, corpus health, and statistics
  • Use four focused research prompts and the eip://research/usage-guide resource

The complete tool reference lists every tool and documents the section and pagination rules.

Result contract

Every tool returns two synchronized forms:

  • a concise Markdown brief for the assistant; and
  • a validated eip-mcp-result-v1 structured envelope preserving the bounded API payload.

Corpus values remain untrusted third-party data in both forms. Text is rendered in inert CommonMark containers, output is capped, truncation is disclosed, and opaque pagination cursors remain reusable byte-for-byte.

Stored analysis is attributed model interpretation, not an EIP verdict. Missing analysis never means that an artifact was reviewed and found safe.

Safety boundary

  • The MCP server connects only to allowlisted read-only API paths.
  • PoC access tokens never reach results, logs, tracebacks, or retained state.
  • There is deliberately no PoC download tool.
  • Source reading is bounded to one API-verified UTF-8 text file at a time.
  • All returned source and corpus prose must be treated as untrusted data and must never be executed or followed as instructions.

See the security policy before reporting a vulnerability or sharing diagnostic output.

Documentation

License

MIT

Project links

Data verified by PyPI on Aug 19, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for EIP from gravatar.com EIP

Credits

Author: Exploit Intel

GitHub Statistics

Data verified by PyPI on Aug 19, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

MIT
View SPDX License List

Requires

Python >=3.12

Tags

cve exploit mcp security vulnerability-intelligence

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

eip_mcp-3.0.1.tar.gz (542.7 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

eip_mcp-3.0.1-py3-none-any.whl (123.8 kB view details)

Uploaded Python 3

File details

Details for the file eip_mcp-3.0.1.tar.gz.

File metadata

  • Download URL: eip_mcp-3.0.1.tar.gz
  • Upload date:
  • Size: 542.7 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for eip_mcp-3.0.1.tar.gz
Algorithm Hash digest
SHA256 c1c48f4b87f8eb8777b53686bbeff888babb2a1f14130ad5a514b71386ef219a
MD5 26f748fa9b858123f589828ef1a8613b
BLAKE2b-256 867a605cf0c5929e3edeeffa647a7b79c388b9fa7623dfe5fe70992d28226cb1

See more details on using hashes here.

Provenance

The following attestation bundles were made for eip_mcp-3.0.1.tar.gz:

Publisher: release.yml on exploitintel/eip-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file eip_mcp-3.0.1-py3-none-any.whl.

File metadata

  • Download URL: eip_mcp-3.0.1-py3-none-any.whl
  • Upload date:
  • Size: 123.8 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for eip_mcp-3.0.1-py3-none-any.whl
Algorithm Hash digest
SHA256 5fce91a08c6690c467569ab6ba7e2574cff3d8f33ef8b6b64b6d2b86c4448fa9
MD5 a93da5ecc120754af1fac500d5d321eb
BLAKE2b-256 9bcbf6200b4f1e9185a36f986e1c70965067e32a10d0e5962713bc816b1c128d

See more details on using hashes here.

Provenance

The following attestation bundles were made for eip_mcp-3.0.1-py3-none-any.whl:

Publisher: release.yml on exploitintel/eip-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

This release

3.0.1 This release

2 files

3.0.0

2 files

0.4.3

2 files

0.4.2

2 files

0.4.1

2 files

0.4.0

2 files

0.3.18

2 files

0.3.17

2 files

0.3.15

2 files

0.3.14

2 files

0.3.13

2 files

0.3.12

2 files

0.3.11

2 files

0.3.10

2 files

0.3.9

2 files

0.3.8

2 files

0.3.7

2 files

0.3.6

2 files

0.3.5

2 files

0.3.4

2 files

0.3.3

2 files

0.3.2

2 files

0.3.1

2 files

0.3.0

2 files

0.2.15

2 files

0.2.14

2 files

0.2.13

2 files

0.2.12

2 files

0.2.10

2 files

0.2.9

2 files

0.2.8

2 files

0.2.7

2 files

0.2.6

2 files

0.2.5

2 files

0.2.3

2 files

0.2.2

2 files

0.2.1

2 files

0.2.0

2 files

0.1.5

2 files

0.1.4

2 files

0.1.3

2 files

0.1.2

2 files

0.1.1

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page