`circl_vuln_search`

Pack: circl-vulnerability-lookup · Endpoint: https://gateway.pipeworx.io/circl-vulnerability-lookup/mcp

No MCP client? Call it directly: GET https://gateway.pipeworx.io/v1/tools/circl_vuln_search for the schema, then POST the same URL with its arguments for the data.

“Vulnerabilities in [vendor] [product]” / “CVEs affecting Apache log4j” / “known issues in [software]” — search CIRCL Vulnerability-Lookup for every vulnerability recorded against a vendor/product pair. Use for software inventory triage (“what is known against the version we run”), dependency review, and vendor risk assessment. Vendor and product are matched against the CPE vendor/product strings, so use the CPE spelling (“apache” + “log4j”, “microsoft” + “windows_10”), not a marketing name.

Parameters

Name	Type	Required	Description
`vendor`	string	yes	CPE vendor string, e.g. “apache”, “microsoft”, “cisco”.
`product`	string	yes	CPE product string, e.g. “log4j”, “windows_10”, “ios”.
`limit`	number	no	Maximum records to return, 1-100. Default 25.

Example call

Arguments

{
  "vendor": "apache",
  "product": "log4j",
  "limit": 2
}

curl

curl -X POST https://gateway.pipeworx.io/circl-vulnerability-lookup/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"circl_vuln_search","arguments":{"vendor":"apache","product":"log4j","limit":2}}}'

TypeScript (@pipeworx/sdk)

import { Pipeworx } from '@pipeworx/sdk';
const pipeworx = new Pipeworx();

const result = await pipeworx.call('circl_vuln_search', {
  "vendor": "apache",
  "product": "log4j",
  "limit": 2
});

Connect

Add this to your MCP client config, or use one-click install buttons:

{
  "mcpServers": {
    "circl-vulnerability-lookup": {
      "url": "https://gateway.pipeworx.io/circl-vulnerability-lookup/mcp"
    }
  }
}

See Getting Started for client-specific install steps.

circl_vuln_search