patch-tuesday — Claude Code MCP server: Microsoft patch data
An MCP server that answers questions about Microsoft's monthly security releases: which CVEs shipped, what is exploited in the wild, and what to patch first.
claude mcp add --transport http patch-tuesday https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcpWhat patch-tuesday does
patch-tuesday wires an AI assistant to Microsoft's public MSRC CVRF v3 API, so you can ask about Patch Tuesday in plain language. It parses the monthly documents — product tree, CVEs, KB articles, severity ratings, CVSS scores, exploitation status — and returns matches sorted by urgency: KEV and exploited first, then EPSS, severity, CVSS.
Two outside feeds enrich the results: daily exploit-probability scores from FIRST.org (EPSS) and the CISA KEV catalog with federal remediation deadlines. You can narrow a month by product, by weakness class (cwe="CWE-416"), by Microsoft's own “Exploitation More Likely” rating, or by use in ransomware campaigns. Other flags pull per-KB detail: fixed builds, restart requirements, known issues, and the support page summary.
No authentication, no API key. Running it locally means uvx patch-tuesday-mcp, so uv has to be on the machine; the hosted HTTP endpoint skips that entirely. Responses are cached in-process, force_refresh=True clears the cache, and include_freshness=True reports cache age and TTL for the MSRC document and the enrichment data.
What it helps with
- pull a monthly rollup of every patched CVE
- find vulnerabilities already exploited in the wild
- map a KB number to the CVEs it fixes
- filter critical CVEs by product family
- export a triage briefing as Markdown or CSV
Example prompts for the agent
- What did this month's Patch Tuesday fix?
- Which Critical CVEs affect Windows Server 2022 this month?
- Show me CVEs with EPSS above 50% and include KB details
How to install patch-tuesday
1Platform CLI: remote server
claude mcp add --transport http patch-tuesday https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp2Platform CLI
claude mcp add patch-tuesday -- uvx patch-tuesday-mcpuvx runs the command named after the package; if the README names another one, use uvx --from patch-tuesday-mcp <command>
1Platform CLI: remote server
codex mcp add patch-tuesday --url https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp2Platform CLI
codex mcp add patch-tuesday -- uvx patch-tuesday-mcpuvx runs the command named after the package; if the README names another one, use uvx --from patch-tuesday-mcp <command>
Config file
{
"mcpServers": {
"patch-tuesday": {
"url": "https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp"
}
}
}{
"mcpServers": {
"patch-tuesday": {
"command": "uvx",
"args": [
"patch-tuesday-mcp"
]
}
}
}uvx runs the command named after the package; if the README names another one, use uvx --from patch-tuesday-mcp <command>
Config file
{
"servers": {
"patch-tuesday": {
"type": "http",
"url": "https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp"
}
}
}{
"servers": {
"patch-tuesday": {
"type": "stdio",
"command": "uvx",
"args": [
"patch-tuesday-mcp"
]
}
}
}uvx runs the command named after the package; if the README names another one, use uvx --from patch-tuesday-mcp <command>
1Platform CLI: remote server
gemini mcp add -t http patch-tuesday https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp2Platform CLI
gemini mcp add patch-tuesday uvx patch-tuesday-mcpuvx runs the command named after the package; if the README names another one, use uvx --from patch-tuesday-mcp <command>
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about patch-tuesday
How do I install patch-tuesday in Claude Code?
Over the hosted HTTP transport: claude mcp add --transport http patch-tuesday https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp. Or locally with uv: claude mcp add patch-tuesday -- uvx patch-tuesday-mcp.
What does patch-tuesday do?
It answers questions about Microsoft's monthly security updates: CVEs and KB articles, severity ratings, CVSS scores, affected products, exploitation status. Results are enriched with EPSS scores and the CISA KEV list.
Does it need an API key?
No. It queries the public MSRC CVRF v3 API, which requires no authentication. A local run needs uv installed, since the server starts through uvx.
