A
licenseNot graded
qualityD
maintenanceEnables searching the NIST NVD for CVEs, retrieving full CVE details, checking software for known vulnerabilities, and searching the CPE database.
1
MIT
scoutwyze-fips-mcp
Allows checking FIPS 140-3 validation status for Samsung Android versions, including certificates, sunset dates, and post-quantum algorithms.
Allows checking FIPS 140-3 validation status for Cisco FTD versions, including certificates and sunset dates.
Allows checking FIPS 140-3 validation status for iOS versions, including certificates and sunset dates.
Allows checking FIPS 140-3 validation status for macOS versions, including certificates and sunset dates.
Allows checking FIPS 140-3 validation status for Okta, including certificates and sunset dates.
Allows checking FIPS 140-3 validation status for Samsung Android versions, including certificates and sunset dates.
Allows checking FIPS 140-3 validation status for SonicWall products, including certificates and sunset dates.
Allows checking FIPS 140-3 validation status for Ubuntu versions, including certificates and sunset dates.
Allows checking FIPS 140-3 validation status for VMware ESXi versions, including certificates and sunset dates.
ScoutWyze FIPS MCP server
Is this product version FIPS 140-3 validated, in NIST's queue, or expiring? An MCP server for the ScoutWyze FIPS status API. Answers come from NIST CMVP lists (active certificates, Modules In Process, Implementation Under Test), with links to the NIST pages used.
Covers Windows 11 / Server, macOS / iOS, FortiOS, PAN-OS, Panorama, Cisco FTD, RHEL, Ubuntu, Samsung Android, Aruba, SonicWall, F5, Juniper, VMware ESXi and Okta. Unmapped products are logged as requests.
Install
{
"mcpServers": {
"scoutwyze-fips": {
"command": "npx",
"args": ["-y", "@scoutwyze/fips-mcp"]
}
}
}Optional env: SCOUTWYZE_API_KEY (prepaid key), SCOUTWYZE_FIPS_BASE_URL (local development only).
Related MCP server: nist-nvd-mcp-server
Tools
Tool | What it does | Cost |
| Covered products and versions | Free |
| Status of one product version, with certificates, sunset dates, post-quantum algorithms and receipts | A few free per day, then credits or x402 |
| Covered versions whose certificates sunset within N days | Free |
| Up to 500 versions in one call | Prepaid credits |
Statuses: ACTIVE, EXPIRING (sunset within 180 days), HISTORICAL, IN_QUEUE, NOT_VALIDATED,
UNVERIFIED. If NIST data is stale, the answer is UNVERIFIED, never ACTIVE.
Payments
This server never holds a private key or pays anything. A 402 response is returned as tool content;
a wallet-capable calling agent can pay the x402 challenge (USDC on Base) and retry with X-PAYMENT.
Not legal or compliance advice. Confirm with your assessor.
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues
Related MCP Connectors
Pay-per-call DNS/TLS truth and npm/PyPI breakage checks via x402. No account or API key.
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Known vulnerabilities for exact package versions from OSV, with fixes. Paid per call, x402.
Related MCP Servers
- AlicenseNot gradedqualityAmaintenanceSearch and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database.433 npm1Apache 2.0
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to check SSL/TLS certificate validity, expiry, issuer, chain details, and security grade for any domain via pay-per-call x402 micropayments.MIT
- AlicenseNot gradedqualityAmaintenanceProvides keyless, read-only access to CISA KEV, SSVC, and full ICS advisory corpus, letting users check CVE statuses, compute BOD 26-04 remediation timelines, and search advisories by vendor, product, CVE, CVSS, or sector.291 npm1Apache 2.0