Install CISA KEV Ransomware CVE, SSL CT Logs & Domain Recon in VS Code

What you need first

• VS Code, installed.
• Nothing else: the server runs on its publisher's machines and VS Code connects to it.

Steps

1. In your project, create .vscode/mcp.json, or open it. For every project, run MCP: Open User Configuration from the Command Palette instead.
2. Add this block. If the file already has servers, add only the entry inside it.

{
  "servers": {
    "cybersecurity-cve-ssl-mcp": {
      "type": "http",
      "url": "https://mcp.apify.com/?actors=b2b-quant-apis/cisa-kev-ransomware-vulnerability-auditor,b2b-quant-apis/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor,b2b-quant-apis/global-b2b-email-domain-security-auditor,b2b-quant-apis/icann-rdap-domain-whois-brand-recon"
    }
  }
}

3. Save the file and choose Start above the server's entry, or run MCP: List Servers. Its tools appear in Copilot Chat's agent mode.

Check it worked

Ask VS Code: List the tools of cybersecurity-cve-ssl-mcp.

If it does not start

401 Unauthorized

The endpoint wants a sign-in or a key. Sign in when VS Code asks.

Nothing changes after a restart

The file is not valid JSON any more. Look for a missing comma where the block was added.