CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.
Scored across 3 tools
Each tool serves a distinct purpose: cve_priority assesses specific CVE IDs, epss_watchlist discovers high-EPSS CVEs not yet in KEV, and kev_recent lists recent KEV additions. The descriptions clearly differentiate their use cases, leaving no ambiguity for an agent to choose the right tool.
All tool names follow a consistent snake_case pattern and begin with the relevant data source acronym (CVE, EPSS, KEV) followed by a descriptor. The style is uniform and predictable across the set.
With only 3 tools, the server is well-scoped for CVE prioritization and monitoring. Each tool earns its place by covering a distinct workflow, and the count is neither too thin nor excessive.
The tool set covers core tasks: assessing given CVEs, discovering high-EPSS CVEs not in KEV, and listing recent KEV entries. Minor gaps exist, such as no explicit tool to browse the full KEV catalog or filter epss_watchlist by vendor/product, but these are workable within the stated purpose.
Patch-priority verdict for 1-20 CVE IDs with evidence: CISA KEV status (date added, due date, ransomware use), FIRST EPSS probability, CVSS (CNA or CISA-ADP), CISA SSVC exploitation/automatable/impact, vendor, product and links. Sorted most urgent first.
Inputs: cves (required), full.
The highest-EPSS CVEs (most likely to be exploited in 30 days) that are not in CISA KEV yet. Defaults to this year's CVE IDs.
Inputs: year, limit, minEpss.
CVEs added to the CISA Known Exploited Vulnerabilities catalog in the last N days, newest first, with due date, ransomware use and EPSS. Optional vendor/product text filter.
Inputs: days, limit, vendor, ransomware.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.
CVE with EPSS and CISA KEV, package risk, software EOL, domain and IP reports, pay per call
x402 CVE triage MCP: EPSS + CISA KEV -> exploit priority, $0.01 per query.
CVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.
Add one secure layer between your agents and this server.