Patch Tuesday MCP Server - install & status [2026]

01 · Install Patch Tuesday

before you install - you'll need

MCP_TRANSPORT

Environment variables documented in the project's README - it lists which are required and which have defaults.

Claude Code

claude mcp add jonnybottles-patch-tuesday-mcp --transport http https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "jonnybottles-patch-tuesday-mcp": {
      "url": "https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io/mcp

transport: streamable-http

endpoint alive - responded to MCP initialize · probed 2026-08-25

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions · remote - your agent's requests go to patch-tuesday-mcp.agreeabledesert-d0b8e491.eastus2.azurecontainerapps.io

endpoint auth accepted our unauthenticated MCP initialize - no credentials needed to connect

repo age created 2026-07-07 - young repo, little track record yet

license no standard license detected - usage rights unclear; check the repo before commercial use

pypi package patch-tuesday-mcp - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.jonnybottles is GitHub-verified and matches the repo owner

03 · What Patch Tuesday can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.9.1 · 2026-07-26

Finishes the migration of the hosted MCP endpoint to a new Azure subscription, right-sizes it, and proves it scales. · New hosted endpoint · The old endpoint keeps working until August 11, 2026 (next Patch Tuesday)…

v0.9.0 · 2026-07-22

What's new · include_update_summary=True on msrc_search KB lookups (single and batched kb=[...]): attaches a per-KB update_summary block - the KB support page's Summary/Highlights text plus its Improvements bullet list…

v0.8.1 · 2026-07-14

Data-quality fixes · EPSS values at source precision - EPSS scores/percentiles are rounded once at parse time to FIRST.org's published 5-decimal precision, so tool output can never surface float-repr artifacts (e.g.…

04 · Who maintains Patch Tuesday

patch-tuesday is maintained by jonnybottles. We track 3 MCP servers from jonnybottles - 3 actively maintained, 6 combined GitHub stars, oldest repo from Jan 2026.

05 · Facts

repository: github.com/jonnybottles/patch-tuesday-mcp
category: security - ranked #72 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 10+ releases in the last 90 days (latest 2026-07-26)
registry: io.github.jonnybottles/patch-tuesday (active, first published 2026-07-11 · 5 versions)
packages: pypi:patch-tuesday-mcp

06 · Patch Tuesday FAQ

What is Patch Tuesday?

Ask your AI assistant about Microsoft security updates. This Python-based MCP (Model Context Protocol) server connects AI assistants like Claude, Copilot, and ChatGPT to the MSRC Security Update Guide - the authoritative source for every CVE Microsoft patches - enabling natural-language queries over Patch Tuesday releases: CVEs, KB articles, severity ratings, CVSS scores, affected products, and exploited-in-the-wild…

Is Patch Tuesday still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-12 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Patch Tuesday?

Run `uvx patch-tuesday-mcp`. The README documents one environment variable (MCP_TRANSPORT) to set first. You can also paste the ready-made client config above.

Does Patch Tuesday require authentication?

No - the endpoint accepted our unauthenticated MCP initialize when probed on 2026-08-25; you can connect without credentials.

07 · Alternatives to Patch Tuesday

Alternatives to Patch Tuesday

Maintained security servers if Patch Tuesday isn't the fit.

Pairs well with

Servers that cover what Patch Tuesday doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Web Metadata, OpenGraph & Contact Extractor · ServiceNow MCP Server · Observatory · Seatbelt · Cinema4d

More Python MCP servers · UNICEF Stats MCP · Partuno - DigiKey & Mouser MCP Server · twscrape Twitter/X (read-only) · see all