# patch-tuesday

An MCP server that answers questions about Microsoft's monthly security releases: which CVEs shipped, what is exploited in the wild, and what to patch first.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 5
- Author: jonnybottles
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/jonnybottles/patch-tuesday-mcp
- Updated: 2026-10-14
- HTML: https://affpapa.org/en/nevibecode/mcp/patch-tuesday

## What it does

patch-tuesday wires an AI assistant to Microsoft's public MSRC CVRF v3 API, so you can ask about Patch Tuesday in plain language. It parses the monthly documents — product tree, CVEs, KB articles, severity ratings, CVSS scores, exploitation status — and returns matches sorted by urgency: KEV and exploited first, then EPSS, severity, CVSS.

Two outside feeds enrich the results: daily exploit-probability scores from FIRST.org (EPSS) and the CISA KEV catalog with federal remediation deadlines. You can narrow a month by product, by weakness class (`cwe="CWE-416"`), by Microsoft's own “Exploitation More Likely” rating, or by use in ransomware campaigns. Other flags pull per-KB detail: fixed builds, restart requirements, known issues, and the support page summary.

No authentication, no API key. Running it locally means `uvx patch-tuesday-mcp`, so uv has to be on the machine; the hosted HTTP endpoint skips that entirely. Responses are cached in-process, `force_refresh=True` clears the cache, and `include_freshness=True` reports cache age and TTL for the MSRC document and the enrichment data.

## Requirements
- Needs: Python and uv (commands run via uvx)
- Remote server: `https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp`

## Install

### Claude Code (native platform)

1. **Platform CLI: remote server**
```bash
claude mcp add --transport http patch-tuesday https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp
```

2. **Platform CLI**
```bash
claude mcp add patch-tuesday -- uvx patch-tuesday-mcp
```
uvx runs the command named after the package; if the README names another one, use uvx --from patch-tuesday-mcp <command>

### Codex

1. **Platform CLI: remote server**
```bash
codex mcp add patch-tuesday --url https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp
```

2. **Platform CLI**
```bash
codex mcp add patch-tuesday -- uvx patch-tuesday-mcp
```
uvx runs the command named after the package; if the README names another one, use uvx --from patch-tuesday-mcp <command>

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "patch-tuesday": {
            "url": "https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp"
        }
    }
}
```
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "patch-tuesday": {
            "command": "uvx",
            "args": [
                "patch-tuesday-mcp"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from patch-tuesday-mcp <command>

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "patch-tuesday": {
            "type": "http",
            "url": "https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp"
        }
    }
}
```
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "patch-tuesday": {
            "type": "stdio",
            "command": "uvx",
            "args": [
                "patch-tuesday-mcp"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from patch-tuesday-mcp <command>

### Gemini CLI

1. **Platform CLI: remote server**
```bash
gemini mcp add -t http patch-tuesday https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp
```

2. **Platform CLI**
```bash
gemini mcp add patch-tuesday uvx patch-tuesday-mcp
```
uvx runs the command named after the package; if the README names another one, use uvx --from patch-tuesday-mcp <command>

## When to use it
- pull a monthly rollup of every patched CVE
- find vulnerabilities already exploited in the wild
- map a KB number to the CVEs it fixes
- filter critical CVEs by product family
- export a triage briefing as Markdown or CSV

## Example prompts
- What did this month's Patch Tuesday fix?
- Which Critical CVEs affect Windows Server 2022 this month?
- Show me CVEs with EPSS above 50% and include KB details

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7658
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2061
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1802

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md