Kevscope CVE Check

Server Details

Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.

Glama couldn't complete the latest health check. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.

If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.

Status: Unhealthy
Last Tested: 2026-10-10 23:59
Transport: Streamable HTTP · MCP 2025-11-25
URL

TDQS

Score is being calculated.

Available Tools

2 tools

check_cvesCheck and prioritise CVEs

Read-onlyIdempotent

Inspect

Use this when the user asks whether a CVE is exploited, how severe it is, or which vulnerabilities to patch first ("is CVE-… exploited", "prioritise these CVEs", "KEV status", "EPSS score"). Pass up to 20 CVE IDs (or text containing them). Returns CISA KEV status, EPSS, CVSS, SSVC and a sorted verdict with reasons.

ParametersJSON Schema

Name	Required	Description	Default
`cves`	Yes

recent_kevNewest exploited vulnerabilities (CISA KEV)

Read-onlyIdempotent

Inspect

Use this when the user asks which vulnerabilities CISA recently added to the Known Exploited Vulnerabilities catalog, optionally for one vendor or product ("new KEV entries this week", "exploited Microsoft vulnerabilities this month", "ransomware-linked CVEs").

ParametersJSON Schema

Name	Required	Description	Default
`days`	No
`limit`	No
`vendor`	No
`ransomwareOnly`	No

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

2 tool updatesOct 10, 2026
- First observedcheck_cves
- First observedrecent_kev

Related MCP Connectors

Kevscope A
dev.workers.cybermax-tools.cybermax
CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.
Security Open Data Government Data
31
EchelonGraph CVE & Exposure A
io.echelongraph
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
Security Penetration Testing Open Data
1612
CVElens Vulnerability Intelligence
com.cvelens
CVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.
Penetration Testing Open Data
1
cve-intelligence A
com.cve-security
CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.
Security Monitoring Observability
91

Related MCP Servers

@cyanheads/cisa-cybersecurity
Government Data Open Data Penetration Testing
cyanheads
A
license
Not graded
quality
A
maintenance
Provides keyless, read-only access to CISA KEV, SSVC, and full ICS advisory corpus, letting users check CVE statuses, compute BOD 26-04 remediation timelines, and search advisories by vendor, product, CVE, CVSS, or sector.
Updated 2 days ago (2026-10-09 06:47 UTC)
414 npm
1
Apache 2.0
CVE Risk MCP Server
Security Monitoring Search
sarveshkapre
A
license
Not graded
quality
C
maintenance
Enables CVE lookups and risk assessment by integrating CISA Known Exploited Vulnerabilities (KEV) data and CVSS metrics. It helps users prioritize patching efforts by ranking vulnerabilities based on exploitation status and calculated risk scores.
Updated 8 months ago (2026-02-12 21:38 UTC)
MIT
CVE Intelligence MCP Server
Penetration Testing Security
gopichand458
A
license
Not graded
quality
D
maintenance
Provides multi-source vulnerability intelligence for AI-powered security operations, combining NVD CVSS, CISA KEV, and EPSS scores without requiring an API key.
Updated 8 months ago (2026-02-15 15:08 UTC)
1
MIT
Cybersecurity Threat
Security Penetration Testing Research & Data
FoundryNet
A
license
Not graded
quality
F
maintenance
Provides CVE search enriched with EPSS exploit likelihood and CISA KEV status, plus live IP/domain reputation and a real-time threat feed for AI agents.
Updated 2 months ago (2026-08-11 06:21 UTC)
MIT