Install FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit for VS Code

Workspace file .vscode/mcp.json uses the servers key. User settings can hold the same shape.

Needs Cursor or VS Code installed on this device. The button opens the app and asks you to confirm before it adds the server.

Open .vscode/mcp.json on macOS, .vscode/mcp.json on Windows, or .vscode/mcp.json on Linux.
Paste the JSON config below.
Replace placeholder secrets, then restart the client if it does not reload on its own.

.vscode/mcp.json

{  "servers": {    "ceadigital-epss-cve-exploit-score": {      "type": "http",      "url": "https://ceadigital.io/mcp/epss"    }  }}

Where the config lives