futurevuls-mcp
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@futurevuls-mcpList open high-severity vulnerabilities in the production group"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
FutureVuls MCP Server (Windows Edition - Node.js)

English | ๆฅๆฌ่ช
Model Context Protocol (MCP) server for FutureVuls vulnerability management service integration
Overview
This project is a Windows-based server that provides access to the FutureVuls API through the Model Context Protocol (MCP). It enables AI assistants like Claude to directly utilize vulnerability management functions.
๐ฏ Key Features
๐ Vulnerability Management: Search and display detailed CVE information
๐ Task Management: Check and manage vulnerability response tasks
๐ฅ๏ธ Server Management: List and display details of monitored servers
๐ Report Generation: Automated weekly report generation
๐ Health Check: FutureVuls API connection verification
Related MCP server: NVD MCP Server
System Requirements
OS: Windows 10/11 (64bit)
Node.js: 18.0 or higher (LTS recommended)
npm: Included with Node.js
Claude Desktop: Latest version
Memory: 4GB or more recommended
Storage: 1GB or more free space
Setup
Note: DXT packaging is not currently supported. We recommend installing and running via npm (global command) for simplicity and reliability.
๐ Quick install (Recommended)
npm install -g @keides2/futurevuls-mcpOr if you have a local tarball (offline/distribution):
npm install -g .\keides2-futurevuls-mcp-2.1.0.tgzThen you can run the server as a CLI:
futurevuls-mcp๐ฆ 1. Clone the Repository
git clone https://github.com/keides2/futurevuls-mcp.git
cd futurevuls-mcp๐ ๏ธ 2. Automated Setup (Recommended)
scripts\setup_windows.batThis script automatically performs the following:
Node.js environment verification
npm dependency installation
Configuration file template creation
Claude Desktop configuration file creation
โ๏ธ 3. Manual Setup
Install Node.js Dependencies
npm installCreate Configuration Files
copy .env.sample .env
copy templates\groups.json.template groups.json
# Be careful not to overwrite when using other MCPs
copy templates\claude_desktop_config.json.template "%APPDATA%\Claude\claude_desktop_config.json"๐ง 4. Edit Configuration Files
Configure .env File
Open the .env file with Notepad or VS Code and configure the following:
# FutureVuls API Configuration (Required)
FUTUREVULS_API_TOKEN=your_actual_api_token_here
# Debug Mode (Optional)
FUTUREVULS_DEBUG=falseConfigure groups.json File
The groups.json file can be placed in any of the following locations (in priority order):
Current Directory - The directory where the command is executed (most convenient)
Script Directory - The directory where
futurevuls-mcp.jsis locatedHome Directory -
C:\Users\[USERNAME]\groups.json
Create/edit the groups.json file with Notepad or VS Code and set your actual group information in the following format:
Group Name: [
"Group Token",
"Group ID",
"Number of Vulnerabilities"
]Example:
{
"group": [
{
"Production Environment": [
"fvgs-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
123,
1500
]
},
{
"Development Environment": [
"fvgs-yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy",
456,
800
]
},
{
...
}
]
}๐ก Tip: For npm global installations, placing
groups.jsonin Claude Desktop's working directory (typicallyC:\Users\[USERNAME]) is the easiest approach.
๐ค 5. Claude Desktop Configuration
Configuration File Location
%APPDATA%\Claude\claude_desktop_config.jsonAccess via File Explorer:
Press
Win + RkeysType
%APPDATA%\Claudeand press EnterEdit
claude_desktop_config.json
Configuration Method (Using Template)
Method 1: Copy Template (Recommended)
# Be careful not to overwrite when using other MCPs
copy templates\claude_desktop_config.json.template "%APPDATA%\Claude\claude_desktop_config.json"Method 2: Manual File Creation
Create %APPDATA%\Claude\claude_desktop_config.json using Notepad or VS Code
Edit Configuration Content
Preferred (npm global command):
{
"mcpServers": {
"futurevuls": {
"command": "futurevuls-mcp",
"args": [],
"env": {
"FUTUREVULS_API_TOKEN": "your_actual_api_token_here"
}
}
}
}Alternative (direct Node path, if not using global install):
{
"mcpServers": {
"futurevuls": {
"command": "node",
"args": ["C:\\Users\\[USERNAME]\\path\\to\\futurevuls-mcp\\futurevuls-mcp.js"],
"env": {
"FUTUREVULS_API_TOKEN": "your_actual_api_token_here"
}
}
}
}โ ๏ธ Important Notes for Path Specification:
Use absolute paths
Escape backslashes with
\\(use\\instead of\)Replace with your actual installation path
File name is
futurevuls-mcp.js(not Python)Avoid paths containing Japanese characters
Usage and Operation Verification
๐ก About MCP Server Operation
AI assistants like Claude Desktop automatically communicate with the MCP server after configuration. The manual startup methods below are primarily for configuration verification, troubleshooting, and development purposes.
๐ 1. Verification - Start with Batch File
start_mcp.batUse Cases:
Operation verification before Claude Desktop configuration
Detailed error message confirmation
Log output monitoring
๐ 2. Verification - Run via npm global command
futurevuls-mcp๐ 3. Verification - Direct Node.js Execution
node futurevuls-mcp.jsUse Cases:
Detailed debug information confirmation
npm dependency issue identification
Development and testing operation verification
โ How to Verify Normal Operation
1. Manual Startup Verification If the following messages appear at startup, it's working normally:
FutureVuls MCP Server starting...
Listening on stdio...
Server initialized successfully2. Claude Desktop Verification
Restart Claude Desktop
Type something like "Check FutureVuls vulnerabilities"
If MCP tools are recognized and executed, it's successful
DXT Distribution (currently unsupported) โ reasons
At present, distributing/running this server in DXT format is not officially supported due to stability concerns. As a workaround, please use the npm global command (futurevuls-mcp) or run directly with Node.js as described above.
Symptoms
In Claude Desktop's UtilityProcess environment, after initialization the following intermittently occur:
-32001 Request timed out
Unexpected server transport closed
On the same machine, direct Node execution and Content-Length smoke tests succeed (not reproducible)
Actions Taken
Rewrote the JSON-RPC stdin parser to support:
Content-Length framing (LSP-style) and JSON Lines
Flexible header termination detection (CRLFCRLF/LFLF)
Response framing that matches the input style
Simplified initialize response and metadata, bumped versions, and repackaged multiple times
Reinstalled DXT package, changed install locations (different drive/ASCII-only paths), re-enabled extensions, etc.
Timeouts/closures still persisted only on some environments
Current Assessment
We suspect environment-specific behavior related to UtilityProcess stdio/lifecycle in certain setups, which prevents us from guaranteeing stability via DXT. In contrast, the npm global command approach has been stable and is operationally simple, so we recommend it as the official method.
Policy
Officially supported: npm global command (futurevuls-mcp)
Alternative: direct Node execution (for development/verification)
DXT: will be revisited as upstream behavior improves; any progress will be announced in README/release notes
API Function List
Function | Description | Claude Usage Example |
| API health check | "Check FutureVuls connection status" |
| Get group list | "Show me monitored groups" |
| Get CVE list | "Display latest vulnerability list" |
| Get CVE details | "Tell me details of CVE-2023-12345" |
| Get task list | "Are there any tasks to handle?" |
| Get task details | "Check details of task 123" |
| Get server list | "Show list of monitored servers" |
| Get groupset servers | "Show servers in groupset" |
| Get group members | "Show members of group 123" |
| Get organization groups | "List all organization groups" |
| Get organization members | "Show organization members" |
| Search high-severity CVEs | "Extract CRITICAL vulnerabilities" |
| Generate weekly report | "Generate this week's vulnerability report" |
File Structure
futurevuls-mcp/
โโโ ๐ futurevuls-mcp.js # Main MCP Server script
โโโ ๐ฆ package.json # Node.js dependencies and metadata
โโโ ๐ง .env.sample # Environment variable template
โโโ ๐ README.md # This file (English)
โโโ ๐ README_ja.md # Japanese README
โโโ ๐ LICENSE # MIT License
โโโ ๐ docs/ # Documentation directory
โ โโโ ๐ setup/ # Setup guides
โ โโโ ๐ guides/ # User guides
โ โโโ ๐ releases/ # Release notes
โ โโโ ๐ api_sample.txt # API usage examples
โโโ ๐ scripts/ # Setup and test scripts
โ โโโ โ๏ธ setup_windows.bat # Windows automated setup
โ โโโ ๐งช test-health.js # Health check script
โโโ ๐ templates/ # Configuration templates
โ โโโ ๐ groups.json.template # Group configuration template
โ โโโ ๐ค claude_desktop_config.json.template # Claude Desktop config template
โโโ ๐ archive/ # Legacy files and old versions
โ โโโ ๐ futurevuls-mcp-legacy.js # Legacy MCP Server (for VSCode + Cline)
โ โโโ ๐ฆ package.*.json # Old package configurations
โ โโโ ๐ฆ *.tgz # Previous release packages
โโโ ๐ผ๏ธ img/ # Images for documentation
โโโ ๐ dxt-init/ # DXT packaging experiments (deprecated)
โโโ ๐ evac/ # Development and backup files๐ง About Server Files
futurevuls-mcp.js (Main)
For Claude Desktop use
Latest MCP protocol version (2024-11-05)
Recommended for general use
Supports flexible groups.json placement
archive/futurevuls-mcp-legacy.js (Legacy)
For VSCode + Cline use
Legacy MCP protocol version (2024-11-05)
Use when the main version is incompatible
Security Considerations
โ ๏ธ Important: The following files contain sensitive information and should not be shared with third parties:
.env(environment variables and API tokens)groups.json(actual group configuration)claude_desktop_config.json(actual Claude Desktop configuration)
Note
This project is designed for use with Node.js on Windows environments.
2025/07/29 keides2 Node.js version support
Available Tools
15 toolsfuturevuls_generate_tm_reportC
TMไผ่ญฐ็จใฎ่ๅผฑๆงใฌใใผใใ็ๆ
| Name | Required | Description | Default |
|---|---|---|---|
| start_date | No | ้ๅงๆฅ (YYYY/MM/DDๅฝขๅผใๆชๆๅฎๆใฏๅ ้ฑๆๆๆฅ) | |
| end_date | No | ็ตไบๆฅ (YYYY/MM/DDๅฝขๅผใๆชๆๅฎๆใฏไป้ฑๆฅๆๆฅ) | |
| min_cvss | No | ๆๅฐCVSS v3ในใณใข (ใใใฉใซใ: 9.0) | |
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, and the description fails to disclose behavioral traits such as whether the report is generated as a file, displayed, or returned, or any side effects like data mutation. For a report generation tool, key details like output format or authentication needs are missing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that front-loads the core purpose. While it is efficient, it borders on under-specification, missing critical details that would justify a 5. It earns its place but lacks depth.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 4 parameters and no output schema or annotations, the description is insufficient. It does not explain the report's scope, output format, or any preconditions. For a tool generating a report, this omission leaves significant gaps for the agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description does not add any extra meaning beyond the schema's parameter descriptions (e.g., start_date, end_date, min_cvss, group). It neither enriches nor contradicts the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'generate' and resource 'vulnerability report for TM meeting', making the purpose unambiguous. While it doesn't explicitly distinguish from the sibling 'futurevuls_generate_weekly_report', the context of 'TM meeting' provides enough differentiation for an AI agent to recognize it as a specific report type.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives or prerequisites. It only states what it does, leaving the agent without context for decision-making. No exclusions or when-not-to-use information is given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_generate_weekly_reportC
้ฑๆฌก่ๅผฑๆงใฌใใผใใ็ๆ
| Name | Required | Description | Default |
|---|---|---|---|
| start_date | No | ้ๅงๆฅ (YYYYMMDDๅฝขๅผใๆชๆๅฎๆใฏๅ ้ฑๆๆๆฅ) | |
| end_date | No | ็ตไบๆฅ (YYYYMMDDๅฝขๅผใๆชๆๅฎๆใฏไป้ฑๆฅๆๆฅ) | |
| min_cvss | No | ๆๅฐCVSS v3ในใณใข (ใใใฉใซใ: 9.0) | |
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations and a terse description, the tool's behavioral traits are opaque. It does not disclose whether the report is generated synchronously, what format or destination it produces, or any side effects. The description only states the basic action without elaborating on outcomes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The single-sentence description is concise and contains no superfluous information. However, it may be too brief; a slightly expanded description could improve clarity without sacrificing conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of annotations and output schema, the description is insufficient for an agent to understand the complete behavior, including return values, error conditions, or the meaning of the generated report. The tool has 4 optional parameters, but no guidance on how they affect the output.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides descriptions for all 4 parameters, including defaults and format. The tool description adds no further semantic value beyond what the schema offers. As schema coverage is 100%, a baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description '้ฑๆฌก่ๅผฑๆงใฌใใผใใ็ๆ' clearly states the tool generates a weekly vulnerability report. While it does not explicitly differentiate from siblings like futurevuls_generate_tm_report, the name and context imply a weekly scope, making the purpose reasonably clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives (e.g., futurevuls_generate_tm_report for a different period). There is no mention of prerequisites or typical use cases, leaving the agent to infer usage from the tool name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_get_cve_detailB
็นๅฎใฎCVEใฎ่ฉณ็ดฐๆ ๅ ฑใๅๅพ
| Name | Required | Description | Default |
|---|---|---|---|
| cve_id | Yes | CVE ID (ไพ: CVE-2021-44228) | |
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the full burden. It only states the tool 'gets details' without disclosing whether it modifies data, requires authentication, or has rate limits. This lack of transparency leaves the agent uninformed about side effects or constraints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no redundant words. It is front-loaded and efficient, though it could be slightly expanded to include additional context without harming conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of an output schema, the description should hint at the type of information returned (e.g., severity, description, references). It does not, making it incomplete for an agent to understand what 'details' means.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% (both parameters have descriptions). The tool description adds no additional meaning beyond what the schema already provides, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool retrieves detailed information for a specific CVE, using a specific verb ('ๅๅพ') and resource ('CVEใฎ่ฉณ็ดฐๆ ๅ ฑ'). It is distinguishable from sibling tools like 'futurevuls_get_cves' (which lists CVEs) and 'futurevuls_search_critical_cves' (which searches for critical ones).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No usage guidance is provided. The description does not specify when to use this tool over alternatives, nor does it mention prerequisites or exclusions like 'use this for a single CVE; for bulk operations use futurevuls_get_cves'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_get_cvesB
่ๅผฑๆงไธ่ฆงใๅๅพใใใผใธใใผใทใงใณใจใใฃใซใฟใชใณใฐใซๅฏพๅฟ
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | ใใผใธ็ชๅท (ใใใฉใซใ: 1) | |
| limit | No | 1ใใผใธใใใใฎไปถๆฐ (ใใใฉใซใ: 20, ๆๅคง: 1000) | |
| filter_cve_id | No | ็นๅฎใฎCVE IDใงใใฃใซใฟ | |
| filter_server_id | No | ็นๅฎใฎใตใผใIDใงใใฃใซใฟ | |
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description bears full responsibility for behavioral disclosure. The description only states pagination and filtering support, omitting critical details like read-only nature, authentication requirements, or any side effects (e.g., destructive actions). For a tool with no annotations, this is insufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that front-loads the core purpose ('Get vulnerability list') and then adds key features ('Supports pagination and filtering'). No wasted words. However, it could be structured to include brief usage hints without becoming verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has 5 optional parameters, no output schema, and no annotations. The description covers pagination and filtering but does not explain what the output contains (e.g., CVE IDs, severity, affected servers) or the scope (all vulnerabilities? per group?). Given the absence of output schema and annotations, more detail would improve completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with all 5 parameters having clear descriptions in the schema. The description adds no extra meaning beyond the schema. Since the schema already provides adequate semantics, the baseline 3 is appropriate; the description does not compensate for any gaps.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states 'Get vulnerability list. Supports pagination and filtering.' This clearly identifies the tool's action (retrieve a list) and resource (vulnerabilities). However, it does not differentiate from related tools like futurevuls_get_cve_detail (which gets a single CVE) or futurevuls_search_critical_cves, missing an opportunity to reduce ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions support for pagination and filtering, providing some usage context. However, it offers no guidance on when to use this tool versus siblings (e.g., for detailed CVE info, use get_cve_detail). No explicit when-to-use or when-not-to-use is given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_get_group_membersB
็นๅฎใฐใซใผใใฎใกใณใใผไธ่ฆงใๅๅพ
| Name | Required | Description | Default |
|---|---|---|---|
| group_id | Yes | ใฐใซใผใID | |
| page | No | ใใผใธ็ชๅท (ใใใฉใซใ: 1) | |
| limit | No | 1ใใผใธใใใใฎไปถๆฐ (ใใใฉใซใ: 20, ๆๅคง: 1000) | |
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided. The description does not disclose behavioral traits such as pagination limits, authentication requirements, or read-only nature. The schema includes defaults for page/limit but the description adds no context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence with no wasted words. It is front-loaded but lacks structural elements like bullet points.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema and no annotations. The description is minimal for a tool with 4 parameters; it fails to explain return format, error cases, or any important behavioral context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so baseline is 3. The description does not add additional meaning beyond the schema's parameter descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description '็นๅฎใฐใซใผใใฎใกใณใใผไธ่ฆงใๅๅพ' clearly states the action (get) and resource (member list of a specific group), effectively distinguishing it from sibling tools like futurevuls_get_org_members (org-level) and futurevuls_list_groups (list groups).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives (e.g., get_org_members, list_groups). No conditions or prerequisites mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_get_groupset_serversB
ใฐใซใผใใปใใใฎใตใผใไธ่ฆงใๅๅพ
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | ใใผใธ็ชๅท (ใใใฉใซใ: 1) | |
| limit | No | 1ใใผใธใใใใฎไปถๆฐ (ใใใฉใซใ: 20, ๆๅคง: 1000) | |
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description must disclose behavior. It only states 'get list' without mentioning read-only nature, side effects, authentication, pagination behavior beyond schema, or response structure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence with no waste. Front-loaded with verb and resource. Could be expanded slightly for clarity but remains concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and no annotations, description is underspecified. Missing context about pagination, required parameters, result format, and how this tool relates to similar ones like futurevuls_get_servers.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. Description adds no extra meaning beyond what schema already provides (page, limit, group descriptions). Could have clarified group parameter semantics or default behavior.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description uses specific verb 'ๅๅพ' (get) and resource 'ใฐใซใผใใปใใใฎใตใผใไธ่ฆง' (list of servers in a group set), clearly distinguishing it from sibling tools like futurevuls_get_servers which likely gets all servers.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool vs alternatives. Does not mention that group parameter is likely required for meaningful results, nor does it differentiate from futurevuls_get_servers or futurevuls_get_group_members.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_get_org_groupsC
็ต็นใฎใฐใซใผใไธ่ฆงใๅๅพ
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | ใใผใธ็ชๅท (ใใใฉใซใ: 1) | |
| limit | No | 1ใใผใธใใใใฎไปถๆฐ (ใใใฉใซใ: 20, ๆๅคง: 1000) | |
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description should disclose behavioral traits like pagination behavior or authentication needs. The single sentence '็ต็นใฎใฐใซใผใไธ่ฆงใๅๅพ' offers no such details, leaving the agent to infer from the schema alone.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single short sentence, which is concise but lacks structure. It front-loads the purpose but omits any additional context that could further aid understanding without excessive verbosity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of an output schema and annotations, the description is insufficiently complete. For a tool with three parameters and multiple siblings, more context about the result format or relationship to other tools would be beneficial.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides descriptions for all three parameters (page, limit, group), achieving 100% coverage. The description adds no additional meaning beyond this, so a baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states that the tool retrieves a list of organization groups, specifying the verb 'get' and the resource 'org groups'. However, it does not differentiate from the sibling tool 'futurevuls_list_groups', which likely has a similar purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives, such as 'futurevuls_list_groups' or 'futurevuls_get_group_members'. It lacks any context about prerequisites or typical use cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_get_org_membersC
็ต็นใฎใกใณใใผไธ่ฆงใๅๅพ
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | ใใผใธ็ชๅท (ใใใฉใซใ: 1) | |
| limit | No | 1ใใผใธใใใใฎไปถๆฐ (ใใใฉใซใ: 20, ๆๅคง: 1000) | |
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden but only states the basic function. It does not disclose that this is a read operation, supports pagination, or any other behavioral traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence, but it could be more informative without sacrificing conciseness. It is adequate but not exemplary.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has three parameters and no output schema, the description is insufficient. It does not explain pagination, the group filter, or the expected return format, making it incomplete for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the parameters are already well-documented in the schema. The description adds no additional meaning beyond what is in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Get list of organization members' clearly states the action (get) and resource (organization members). It is specific enough, though it does not differentiate from the sibling tool 'futurevuls_get_group_members'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like 'futurevuls_get_group_members'. The description lacks context for appropriate usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_get_serversA
ใตใผใไธ่ฆงใๅๅพใใใผใธใใผใทใงใณใจใใฃใซใฟใชใณใฐใซๅฏพๅฟ
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | ใใผใธ็ชๅท (ใใใฉใซใ: 1) | |
| limit | No | 1ใใผใธใใใใฎไปถๆฐ (ใใใฉใซใ: 20, ๆๅคง: 1000) | |
| filter_role_id | No | ็นๅฎใฎใญใผใซIDใงใใฃใซใฟ | |
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description indicates a read operation ('acquire'), but with no annotations provided, it fails to disclose additional behavioral traits such as authentication requirements, rate limits, or any side effects. Mentions of pagination and filtering hint at safety, but not explicitly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise, consisting of one sentence with two clauses. It front-loads the main action and supporting features with zero waste.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
While the description covers the main purpose and features, it omits details about the output format or return fields, which is important since no output schema is provided. For a list tool, knowing what data is returned (e.g., server IDs, names, status) is crucial for agent decision-making.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with all parameters documented. The description adds a high-level statement about supporting pagination and filtering, which aligns with the parameters but does not add new meaning beyond what the schema already provides. Baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Get server list' (ใตใผใไธ่ฆงใๅๅพ) and mentions pagination and filtering, distinguishing it from sibling tools like futurevuls_get_group_members or futurevuls_get_groupset_servers which focus on specific group members or groupsets.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for listing servers with pagination and filtering, but provides no explicit guidance on when to use this tool versus alternatives, nor any prerequisites or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_get_task_detailC
็นๅฎใฎใฟในใฏใฎ่ฉณ็ดฐๆ ๅ ฑใๅๅพ
| Name | Required | Description | Default |
|---|---|---|---|
| task_id | Yes | ใฟในใฏID | |
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, and the description does not disclose any behavioral traits such as idempotency, side effects, required permissions, or return value structure. For a presumably read-only tool, this is a significant gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is very shortโone sentence. While concise, it lacks informational density. Not wasteful, but could be more informative in the same space.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema, no annotations, and minimal description. For a tool that returns 'detailed information', it does not hint at what details are included (e.g., severity, status), leaving the agent underinformed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with both parameters described adequately. The description adds no extra meaning beyond what's in the schema, so baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description states 'Get detailed information of a specific task' which is a clear verb+resource. However, it does not differentiate from sibling 'futurevuls_get_tasks' which might list tasks, so purpose clarity is good but not excellent.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. No mention of prerequisites, context, or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_get_tasksC
ใฟในใฏไธ่ฆงใๅๅพใใใฃใซใฟใชใณใฐใซๅฏพๅฟ
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | ใใผใธ็ชๅท (ใใใฉใซใ: 1) | |
| limit | No | 1ใใผใธใใใใฎไปถๆฐ (ใใใฉใซใ: 20, ๆๅคง: 1000) | |
| filterCveID | No | CVE IDใงใใฃใซใฟ | |
| filterStatus | No | ในใใผใฟในใงใใฃใซใฟ | |
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must fully disclose behavior. It only mentions retrieval and filtering, omitting details on pagination limits, response format, or authentication needs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Extremely concise with two sentences. Front-loads the purpose with no unnecessary text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With 5 optional parameters and no output schema, the description is too minimal. It fails to explain pagination, filtering specifics, or return value structure.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so parameters are fully described in the schema. The description adds no extra meaning beyond stating support for filtering. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it retrieves a task list with filtering support. However, it does not differentiate from sibling tools like 'futurevuls_get_task_detail' which likely retrieves a single task.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool vs alternatives. Sibling tools suggest distinctions exist (e.g., get_task_detail for single task), but the description does not mention them.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_get_weekly_periodA
ๅ ้ฑๆๆๆฅใใไป้ฑๆฅๆๆฅใพใงใฎๆ้ใๅๅพ
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description is concise but lacks behavioral details beyond the basic purpose. Annotations are absent, so the description carries full burden. It does not mention output format or any side effects, but for a parameterless read-only tool, the description is adequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence that is front-loaded and contains no unnecessary words. It efficiently conveys the tool's purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (no parameters, no output schema), the description is nearly complete. It could specify the return type (e.g., a date range string) but is sufficient for an agent to understand what it does.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, so schema coverage is 100%. The description adds no parameter information, but with zero parameters, the baseline score of 4 is appropriate. The description does not need to elaborate further.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it retrieves a weekly period from last Monday to this Sunday. The verb 'ๅๅพ' (get) and the resource 'weekly period' are specific. While it distinguishes from sibling tools which are mostly report generators or data retrievers, it doesn't explicitly contrast itself.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. Sibling tools like report generators imply different use cases, but no explicit when-to-use or when-not-to-use instructions are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_health_checkC
FutureVuls API ใฎใใซในใใงใใฏใๅฎ่ก
| Name | Required | Description | Default |
|---|---|---|---|
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description must disclose behavioral traits. It only says 'execute health check' without detailing what the check entails, whether it is read-only or destructive, or what success/failure looks like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence is concise but under-specified. It lacks structure and could be more informative without becoming verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description should mention return values (e.g., health status). It does not, leaving the agent uninformed about expected outcomes.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and the schema already describes the group parameter. The description adds no further meaning beyond the schema, so baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the verb 'execute' and resource 'health check of FutureVuls API', but does not differentiate from sibling tools which all have distinct purposes like report generation or data retrieval.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus alternatives. The description implies it's for health checking but lacks context on prerequisites or scenarios where other tools are more appropriate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_list_groupsA
groups.jsonใใๅฉ็จๅฏ่ฝใชใฐใซใผใไธ่ฆงใจใใผใฏใณๆ ๅ ฑใๅๅพ
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so the description is the sole source. It indicates a read operation (list retrieval) but does not disclose any behavioral traits like authentication, rate limits, or side effects. Adequate for a simple list tool but lacks depth.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that conveys the essence without unnecessary words. It is front-loaded and efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a no-parameter, no-output-schema tool, the description is nearly complete. It explains what is retrieved (group list and token info) and the source (groups.json). Lacks mention of potential pagination or filtering, but likely unnecessary.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters in the schema; baseline score of 4 applies. The description does not need to add parameter details since there are none.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb (ๅๅพ - get) and resource (ใฐใซใผใไธ่ฆงใจใใผใฏใณๆ ๅ ฑ from groups.json). It is specific but does not differentiate from sibling tools like futurevuls_get_org_groups or futurevuls_get_group_members.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus other list tools (e.g., futurevuls_get_org_groups). The description only states what it does, not the context or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
futurevuls_search_critical_cvesB
ๆๅฎๆ้ๅ ใฎCVSS v3ใๆๅฎๅคไปฅไธใฎ่ๅผฑๆงใๆค็ดข
| Name | Required | Description | Default |
|---|---|---|---|
| start_date | No | ้ๅงๆฅ (YYYYMMDDๅฝขๅผใๆชๆๅฎๆใฏๅ ้ฑๆๆๆฅ) | |
| end_date | No | ็ตไบๆฅ (YYYYMMDDๅฝขๅผใๆชๆๅฎๆใฏไป้ฑๆฅๆๆฅ) | |
| min_cvss | No | ๆๅฐCVSS v3ในใณใข (ใใใฉใซใ: 9.0) | |
| group | No | ๅฏพ่ฑกใฐใซใผใๅ (ERMS, DBIPS, GPF็ญ) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It states the tool searches for vulnerabilities but does not disclose any behavioral traits such as whether it is read-only, any side effects, rate limits, or authentication needs. The minimal description lacks transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that is front-loaded with key information. No wasted words, though it could benefit from more structure.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and no annotations, the description is incomplete. It does not explain return values, pagination, or any output format. For a search tool with 4 parameters, more context is expected.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with each parameter described in the schema. The description only summarizes the tool's purpose without adding extra meaning beyond the schema. Baseline 3 applies as schema does the work.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly states the tool searches for vulnerabilities with CVSS v3 above a specified value within a specified date range. It clearly distinguishes from siblings like futurevuls_get_cves by focusing on critical CVEs and date/CVSS filtering.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for searching critical CVEs within a period but provides no explicit guidance on when to use this tool versus alternatives. No 'when not to use' or comparison with siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
15 tool updates
v2.2.1- First observed
futurevuls_generate_tm_report - First observed
futurevuls_generate_weekly_report - First observed
futurevuls_get_cve_detail - First observed
futurevuls_get_cves - First observed
futurevuls_get_group_members - First observed
futurevuls_get_groupset_servers - First observed
futurevuls_get_org_groups - First observed
futurevuls_get_org_members - First observed
futurevuls_get_servers - First observed
futurevuls_get_task_detail - First observed
futurevuls_get_tasks - First observed
futurevuls_get_weekly_period - First observed
futurevuls_health_check - First observed
futurevuls_list_groups - First observed
futurevuls_search_critical_cves
TDQS
Scored across 15 tools
Most tools have distinct purposes, but list_groups and get_org_groups could be confused without careful reading; the descriptions help differentiate.
All tools follow a consistent 'futurevuls_verb_noun' pattern with snake_case, using verbs like get, list, generate, search appropriately.
15 tools cover a comprehensive range of vulnerability management operations without being overwhelming.
Covers reading and reporting well, but lacks any write operations (create/update/delete) for vulnerabilities, groups, or tasks, which leaves notable gaps.
Maintenance
Related MCP Connectors
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.
An MCP server that integrates with Discord to provide AI-powered features.
Related MCP Servers
- AlicenseAqualityAmaintenanceAn MCP server for vulnerability management that provides tools for automated severity and CWE classification using NLP models. It enables AI agents to query the Vulnerability Lookup API for detailed CVE information and search for security vulnerabilities across various sources.1642AGPL 3.0
- AlicenseAqualityCmaintenanceMCP server for the NIST National Vulnerability Database โ lets AI assistants search CVEs by keyword, severity, CPE, CWE, KEV status, and date range via natural language.2GPL 3.0
- AlicenseNot gradedqualityCmaintenanceMCP server providing vulnerability intelligence from CVEFeed.io, enabling CVE search, product subscriptions, and alert management via natural language.MIT
- AlicenseNot gradedqualityDmaintenanceMCP server enabling AI assistants to interact with the Qualys vulnerability management platform. Supports investigation, risk assessment, compliance, remediation, security overview, and report management.11 npm2MIT