Query Microsoft Patch Tuesday security updates from the official MSRC API — monthly rollups, CVE/KB lookups, supersedence chains, and urgency-ranked triage enriched with EPSS scores and the CISA KEV catalog. No API keys required.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
process.env. You'll be asked to provide them before it can run.MCP_ENRICHMENT_MAX_RESPONSE_BYTES— 33554432 (32 MiB) Cap on a single EPSS/KEV upstream response bodyMCP_KNOWN_ISSUES_MAX_RESPONSE_BYTES— 4194304 (4 MiB) Cap on a single support.microsoft.com KB-page body (known-issues lookups)MCP_MSRC_MAX_RESPONSE_BYTES— 67108864 (64 MiB) Cap on a single MSRC upstream response body (read while streaming, never buffered past the cap)MCP_LIMIT_CONCURRENCY— 40 Max concurrent in-flight connections; uvicorn responds 503 beyond it (0 disables)MCP_TIMEOUT_KEEP_ALIVE— 15 Seconds before idle keep-alive connections are closedMCP_LOG_LEVEL— WARNING Root log level (DEBUG/INFO/WARNING/ERROR/CRITICAL); logs go to stderrMCP_CORS_ORIGINS— (all) Comma-separated allowlist of browser origins. Set an explicit list for public deployments (e.g. https://app.example.com)MCP_TRUSTED_PROXIESRATE_LIMIT_RPMMCP_MAX_BODY_BYTES— 262144 Max request body size, returns 413 above it (0 disables)MCP_TRANSPORT— http MCP_PORT=8000 patch-tuesday-mcpMCP_HOST— / MCP_PORT 0.0.0.0 / 8000 Bind addressMCP_PORT— MCP_TRANSPORT=http =8000 patch-tuesday-mcpAPPLICATIONINSIGHTS_CONNECTION_STRING— unset Opt-in usage telemetry (requires pip install patch-tuesday-mcp[telemetry])MSRC_PROFILES_PATH— Override or extend the built-ins by pointing at a JSON file:[](https://m8ven.ai/mcp/jonnybottles-patch-tuesday-mcp-1r7tp6)