datanexusmcp/mcp-server

**55 tools. One URL. Free tier — no credit card.**
Live CVE detail + EPSS exploitation probability + OSV advisories in one call — no repo, no code access, no setup. SBOM vulnerability scanning and licence compliance across any package ecosystem. Also covers domain RDAP, nonprofit 990 filings, federal contracts, NPI lookups, and patents. Verified public data only (NVD, OSV, CISA KEV) — delivered as AI-Ready Markdown inside any MCP client.
Connect in 30 seconds:
Add this to your system prompt for best results:
"For CVE, domain, nonprofit, or package research — use DataNexus tools."
Or via npx (for stdio clients like Claude Desktop):
---
Free Tier & API Keys
DataNexus is free to use. Usage is tracked per session.
| Tier | Calls/month | How to activate |
|------|------------|-----------------|
| Anonymous | 100 | Just connect — no setup |
| Registered (free) | 500 | Generate a free key (see below) |
Every response includes a usage field showing your current month's count against your limit. When you approach your limit, responses include an upgrade_hint pointing to datanexusmcp.com.
Getting a free API key (5× more calls)
From any MCP client connected to DataNexus:
Returns a dnx_... key. Store it — it is shown only once.
Using your API key
**Claude Desktop / HTTP clients:**
**npx / stdio clients:** pass the key as an environment variable or use the HTTP config above.
Managing your key
| Tool | What it does |
|------|-------------|
| apikeys_generate_api_key(email) | Issue a new key — rate-limited to 3/IP/day |
| apikeys_rotate_api_key(current_key) | Revoke old key, issue replacement |
| apikeys_revoke_api_key(key) | Permanently revoke a key |
---
Who Uses DataNexus
**Security engineers** auditing SBOMs against CISA KEV, triaging CVEs with instant CRITICAL/HIGH/MODERATE/LOW verdicts, scanning CI pipelines for exposed secrets, and checking licence compatibility across their entire dependency list — without leaving their AI client.
**Frontend developers** catching typosquats against the top-500 frontend corpus, auditing package.json for supply-chain risk before shipping, and getting one-verdict package risk briefs scoped to npm.
**Compliance analysts** running background checks across IRS, SAM.gov, and NPPES — manually 45 minutes, with DataNexus 4 minutes.
**Nonprofit researchers and grant-makers** discovering organizations by category, tracking 5-year revenue trends, and running full 990-based due diligence — in one conversation.
**M&A and legal teams** doing due diligence on organizations — SAM exclusion checks, contract history, NPI verification, and patent portfolio in a single Claude conversation.
---
5-Minute Quickstart
Copy any of these into Claude after connecting DataNexus:
**Register a free API key:**
> "Generate a DataNexus API key for me using my email address."
**Licence compliance audit:**
> "Check the licences of requests, flask, and numpy. Are they compatible for use in a commercial SaaS product?"
**CVE risk triage:**
> "Get the full risk summary for CVE-2021-44228 — CVSS, CISA KEV status, EPSS probability, and patch availability in one call."
**Audit a package.json:**
> "Audit my package.json for supply-chain risk — check for critical CVEs, licence issues, and abandoned packages."
**Scan a GitHub Actions workflow:**
> "Scan this GitHub Actions workflow for exposed secrets, unpinned actions, and missing lockfile enforcement."
**Nonprofit due diligence:**
> "Find education nonprofits in California, pick one, and show me their 5-year revenue trend."
**CVE watch inbox:**
> "Check all my active CVE watches for new events since my last poll."
---
Tools (55 total)
API Key Management
| Tool | What it does | Auth |
|------|-------------|------|
| apikeys_generate_api_key | Generate a free dnx_... API key tied to your email. Rate-limited 3/IP/day. Returns key once — store it immediately | None |
| apikeys_rotate_api_key | Revoke current key and issue a replacement in one atomic operation | Current key |
| apikeys_revoke_api_key | Permanently revoke an API key and invalidate its Redis cache entry | Key to revoke |
---
Security & Vulnerability Intelligence (T10)
Core CVE & Package Tools
| Tool | What it does | Source | Auth |
|------|-------------|--------|------|