Patch Tuesday MCP Server

Ask your AI assistant about Microsoft security updates. This Python-based MCP (Model Context Protocol) server connects AI assistants like Claude, Copilot, and ChatGPT to the MSRC Security Update Guide - the authoritative source for every CVE Microsoft patches - enabling natural-language queries over Patch Tuesday releases: CVEs, KB articles, severity ratings, CVSS scores, affected products, and exploited-in-the-wild…

People who work with cisa kev, cve and epss and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-09-10 · ★ 4 · #102 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18

Python servers · how we verify → /methodology

01 · Install Patch Tuesday

before you install - you'll need

MCP_TRANSPORT

Environment variables documented in the project's README - it lists which are required and which have defaults.

Claude Code

claude mcp add jonnybottles-patch-tuesday-mcp --transport http https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "jonnybottles-patch-tuesday-mcp": {
      "url": "https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp

transport: streamable-http

endpoint alive - responded to MCP initialize · probed 2026-09-17

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions · remote - your agent's requests go to patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io

endpoint auth accepted our unauthenticated MCP initialize - no credentials needed to connect

license no standard license detected - usage rights unclear; check the repo before commercial use

pypi package patch-tuesday-mcp - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.jonnybottles is GitHub-verified and matches the repo owner

03 · What Patch Tuesday can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.9.1 · 2026-07-26

Finishes the migration of the hosted MCP endpoint to a new Azure subscription, right-sizes it, and proves it scales. · New hosted endpoint · The old endpoint keeps working until August 11, 2026 (next Patch Tuesday)…

v0.9.0 · 2026-07-22

What's new · include_update_summary=True on msrc_search KB lookups (single and batched kb=[...]): attaches a per-KB update_summary block - the KB support page's Summary/Highlights text plus its Improvements bullet list…

v0.8.1 · 2026-07-14

Data-quality fixes · EPSS values at source precision - EPSS scores/percentiles are rounded once at parse time to FIRST.org's published 5-decimal precision, so tool output can never surface float-repr artifacts (e.g.…

04 · Who maintains Patch Tuesday

patch-tuesday is maintained by jonnybottles. We track 3 MCP servers from jonnybottles - 3 actively maintained, 6 combined GitHub stars, oldest repo from Jan 2026.

05 · Facts

repository: github.com/jonnybottles/patch-tuesday-mcp
category: security - ranked #102 of 204 actively-maintained security servers as of 2026-09-18.
release cadence: 10+ releases in the last 90 days (latest 2026-07-26)
registry: io.github.jonnybottles/patch-tuesday (active, first published 2026-07-11 · 5 versions)
packages: pypi:patch-tuesday-mcp

06 · Patch Tuesday FAQ

What is Patch Tuesday?

Is Patch Tuesday still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-10 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Patch Tuesday?

Run `uvx patch-tuesday-mcp`. The README documents one environment variable (MCP_TRANSPORT) to set first. You can also paste the ready-made client config above.

Does Patch Tuesday require authentication?

No - the endpoint accepted our unauthenticated MCP initialize when probed on 2026-09-17; you can connect without credentials.

07 · Alternatives to Patch Tuesday

Alternatives to Patch Tuesday

Maintained security servers if Patch Tuesday isn't the fit.

Pairs well with

Servers that cover what Patch Tuesday doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Web Metadata, OpenGraph & Contact Extractor · ServiceNow MCP Server · Observatory · Seatbelt · Cinema4d

More Python MCP servers · UNICEF Stats MCP · Partuno - DigiKey & Mouser MCP Server · iCloud Drive Docs · Sonicmatch · see all