Developer tools integration

cve.now MCP integration for AI agents

Insiro connects AI agents to cve.now MCP so they can act in it under your rules. cve.now is a free public vulnerability feed and lookup service for CVEs, GHSAs, OSVs, and package versions. It provides fast, exact vulnerability checks against an indexed catalog without requiring authentication. Every cve.now MCP action runs through Insiro's governed gateway, using each person's own connection (no login).

What can AI agents do with cve.now MCP?

With Insiro, agents can open issues and pull-request summaries, triage errors and alerts into the backlog, read logs and deployment history during an incident and draft release notes from merged work, all inside the permissions you set for cve.now MCP.

  • Open issues and pull-request summaries.
  • Triage errors and alerts into the backlog.
  • Read logs and deployment history during an incident.
  • Draft release notes from merged work.

A journey through Insiro

cve.now MCP logo cve.now MCPInsiroLinear

Example: cve.now MCP → Insiro → Linear to file new errors as triaged issues. Insiro checks permissions, applies approvals and records the evidence at every hop.

Frequently asked questions about cve.now MCP

Can Insiro AI agents use cve.now MCP?

Yes. Insiro connects AI agents to cve.now MCP through its governed MCP gateway. Agents can open issues and pull-request summaries and triage errors and alerts into the backlog using each person's own cve.now MCP access, with read-only as the default and approvals for actions that change data.

How does Insiro connect to cve.now MCP?

cve.now MCP connects with no login. Each user connects their own account once; Insiro stores the credential encrypted and brokers it to the tool only at the moment of a call, so models never see it. Admins can also register a workspace-level connection.

Can I make cve.now MCP read-only for agents?

Yes. In Insiro Governance, set cve.now MCP to Off, Read only, or Read and write in a click. Write actions can require confirmation or owner approval by risk tier, and every call is logged with the user, tool, tokens and cost.

Put cve.now MCP to work with governed AI agents.

A 30-minute working session: we connect one data source and one app, then run a governed agent on a task you choose.

  • 13governance checks on every agent tool call
  • 1,700+SaaS apps agents can act in
  • 30+data dialects for plain-English questions