"Citrix" matching MCP tools:

• bitrix-method-details

  Bitrix MCP

  Get details for a Bitrix24 REST method by exact name (use `bitrix-search` first). Returns plain text with labeled sections including parameters, returns, errors, and examples. Optional `field` limits output; `filter` narrows params by entity or examples by language.

  Connector

• bitrix-app-development-doc-details

  Bitrix MCP

  Fetch Bitrix24 app development documentation by exact title (use `bitrix-search` with doc_type app_development_docs). Returns plain text labeled fields (Title, URL, Module, Category, Description, Content) without Markdown.

  Connector

• kev-vendor-risk

  Jeevesus — DugganUSA Threat Intelligence MCP

  Vendor / product risk matrix built from CISA's Known Exploited Vulnerabilities (KEV) catalog — where real, confirmed in-the-wild exploitation actually concentrates, not just where CVSS is high. With no args: returns the top vendors ranked by KEV count (e.g. Microsoft, Cisco, Adobe, Ivanti, Citrix). With {"vendor":"Adobe"}: returns that vendor's or product's specific known-exploited CVEs (e.g. ColdFusion), most-recent first, each with a ransomware-use flag. Use this to answer "which vendors/products carry the exploitation risk we should patch first," to assess third-party / supply-chain exposure, or to check whether a freshly-dropped PoC lands on a chronically-exploited product (a proven-soft target) versus a one-off. KEV means CISA has confirmed active exploitation. Public read (no auth). Source is CISA's KEV catalog, refreshed continuously. Example: {"vendor":"Citrix"} → NetScaler's known-exploited CVEs; {} → the full top-vendor risk ranking.

  Connector

• bitrix-search

  Bitrix MCP

  Search Bitrix24 REST docs by natural-language query and return a short plain-text list of matches (method/event/article/app doc) with name, type, and brief description. Use the exact name/title from results when calling details tools. Optional filters: `limit` and `doc_type` (method|event|other|app_development_docs).

  Connector

• exploited_vulnerabilities

  dynamic-feed

  Vulnerabilities CONFIRMED exploited in the wild — the CISA Known Exploited Vulnerabilities (KEV) catalog, each enriched with its EPSS exploitation-probability score (FIRST.org), plus a risk `summary`. The 'which CVEs actually matter right now' layer that pairs with security_advisories (disclosed CVEs) and check_vulnerability (is package@version affected). Args: query: match a CVE id / name / description. vendor: filter by vendor — accepts a COMMA LIST (e.g. "Microsoft, Cisco, Fortinet"), match ANY. product: filter by product — accepts a COMMA LIST (e.g. "Windows, PAN-OS"), match ANY. stack: a client's whole tech stack as a comma list (e.g. "Fortinet, Ivanti, Citrix, Apache"), matched against vendor OR product — returns exactly the actively-exploited CVEs affecting that stack: a live per-stack vulnerability watch (see the `summary` for the headline risk). ransomware_only: only CVEs linked to known ransomware campaigns. recent_days: only CVEs added to the KEV catalog in the last N days. sort: "recent" (newest catalogued first, default) or "risk" (highest EPSS first). limit: max results. Every value is returned in an Ed25519-signed, provenance-stamped envelope (source and observation time) you can verify offline against /.well-known/keys, no account required.

  Connector

• bitrix-event-details

  Bitrix MCP

  Fetch Bitrix24 event documentation by exact event name (use `bitrix-search` with doc_type event). Returns Markdown with title, metadata (URL/module/category), description, and content.

  Connector

• bitrix-article-details

  Bitrix MCP

  Fetch a non-method Bitrix24 documentation article by exact title (use `bitrix-search` with doc_type other). Returns Markdown with title, metadata (URL/module/category), description, and content.

  Connector