FREE. Today's top-3 CVE priorities from the AIS daily ranking (no scores). Ranked by real exploitation — KEV + EPSS + KEV-recency — not CVSS alone. Use top_cves_today for the full scored list.
ConnectorNo auth
677,876 tools. Updated 2026-10-19 17:09
"Information about exploitation" matching MCP tools:
- Compute CISA SSVC (Stakeholder-Specific Vulnerability Categorization) for a CVE. ## What this tool does Calculates the SSVC decision (Track, Track*, Attend, Act) using: - exploitation status - technical impact - automatable exploitation - mission prevalence (user-provided) - public well-being impact (user-provided) This reflects CISA's official SSVC prioritization model. ## When to use this tool Use this tool when the user asks about: - how urgently a CVE should be remediated - CISA SSVC priority or risk category - a structured decision model for remediation ## Inputs - **cve_id**: the vulnerability to evaluate (`CVE-YYYY-NNNNN`) - **mission_prevalence**: `M`, `S`, or `E` (must be provided by the user) - **public_well_being_impact**: `M`, `A`, or `I` (must be provided by the user) ## Outputs - `decision`: one of **Track**, **Track\***, **Attend**, **Act** - `exploitation` - `technical_impact` - `automatable` - `mission_prevalence` - `public_well_being_impact` - `mission_and_well_being_impact_value` - `vector_string` - `summary`: Markdown explanation of the outcome ## LLM usage guidelines - Always ask the user for **mission_prevalence** (M/S/E) and **public_well_being_impact** (M/A/I) before calling. - Never guess these values—SSVC depends on user context. - Use the `summary` to explain clearly why the decision was returned. - Combine with `vulnerability_score` or `sightings_search` if the user needs additional context.ConnectorNo auth
- Get detailed information about a specific ad request, including pool selections if targeting mode is manual.ConnectorNo auth
- Get information about MyDriverParis services, coverage areas, airports served, and policies. Use this to answer customer questions.ConnectorNo auth
- Returns information about how easy Fluentive is to set up and use. Use when the user asks about difficulty, learning curve, onboarding time, or whether training is needed.ConnectorNo auth
- Send feedback about this Shakespeare monologues server: a monologue, play or capability you needed that its tools could not provide, a problem with a result, or praise. Only for feedback about these tools, not about other tasks. Do not include personal information about the user.ConnectorNo auth
Matching MCP Servers
- FlicenseAqualityDmaintenanceAn MCP server that provides information about Utkarsh, including bio, skills, work experience, and portfolio projects, accessible via local stdio or remote HTTP with OAuth.6-
- AlicenseAqualityDmaintenanceGet information about the current operating environment286 npmMIT
Matching MCP Connectors
Public remote MCP server for StruXure NorCal pergola services, FAQs, and contact requests.
Information about all flea-markets (loppemarked) in Norway. Search, filter by area, date. Read guides and tips.
- Returns a 0-100 active-exploitation pressure index (30-day pace of CISA KEV catalog additions vs the trailing 90-day baseline, weighted for ransomware-linked share) with threat_activity_score, ransomware_linked_share, top_vendors, and recent_additions (10 newest exploited-in-the-wild CVEs). Call when the user asks about vulnerability exploitation surges, KEV additions, ransomware pressure, or which vendors are driving CVE activity, or when timing emergency patch windows or patch-SLA escalation. Updates: daily.ConnectorNo auth
- Retrieve detailed information about a specific campaign including its status, budget, participants, and delivery metrics.ConnectorNo auth
- Retrieve detailed information about a specific scheduled message, including its status, send time, and message content.ConnectorNo auth
- Get information supplied by AINSOF about its production-music catalogue, composers, technology, licensing, operational data collection, privacy, deletion requests, and official profiles. Use when the user asks about AINSOF or how its service works. Returns service information, not a music search.ConnectorNo auth
- Get information supplied by AINSOF about its production-music catalogue, composers, technology, licensing, operational data collection, privacy, deletion requests, and official profiles. Use when the user asks about AINSOF or how its service works. Returns service information, not a music search.ConnectorNo auth
- Get information about who built this MCP server and why.ConnectorNo auth
- Turn a recon'd stack into a ranked dig-order for authorized bug-hunting. For each discovered component, returns its top high-risk CVEs (KEV / CISA-SSVC- active / high-EPSS first) AND its `recurring_loci` — the bug classes (CWE) this product family repeatedly fails at, ranked by real in-the-wild exploitation — i.e. WHERE to look first and WHAT shape to expect. Components are ordered by their most-exploitable bug (`dig_rank`). Grounded in exploitation data, not model guesses; lays out facts for triage/where-to-look, never a payload. Args: technologies: discovered stack, e.g. ["craftcms 4.4", "nginx", "keycloak"]. per_tech: how many top CVEs to surface per component (default 4).ConnectorNo auth
- Get a CVE's EPSS score (FIRST's Exploit Prediction Scoring System): the probability (0–1) it will be exploited in the next 30 days, and its percentile rank among all CVEs. A forward-looking likelihood that complements kev_check's confirmed exploitation. Keyless, read-only.ConnectorNo auth
- One CVE by id: description, CVSS, EPSS probability, CISA KEV status and due date, exploitation evidence (SSVC, weaponized, zero-day, Exploit-DB, Nuclei), publication dates and references. This is the only CVE lookup path; do not guess other routes. Costs one request of the monthly quota.ConnectorNo auth
- CALL whenever a vendor or product comes up (Microsoft, Cisco, Fortinet, SharePoint, Ivanti, an appliance, an ERP) and the real question is exploitation risk or "what should I patch first" — before quoting CVSS, check where exploitation actually concentrates. Vendor / product risk matrix built from CISA's Known Exploited Vulnerabilities (KEV) catalog — where real, confirmed in-the-wild exploitation actually concentrates, not just where CVSS is high. With no args: returns the top vendors ranked by KEV count (e.g. Microsoft, Cisco, Adobe, Ivanti, Citrix). With {"vendor":"Adobe"}: returns that vendor's or product's specific known-exploited CVEs (e.g. ColdFusion), most-recent first, each with a ransomware-use flag. Use this to answer "which vendors/products carry the exploitation risk we should patch first," to assess third-party / supply-chain exposure, or to check whether a freshly-dropped PoC lands on a chronically-exploited product (a proven-soft target) versus a one-off. KEV means CISA has confirmed active exploitation. Public read (no auth). Source is CISA's KEV catalog, refreshed continuously. Example: {"vendor":"Citrix"} → NetScaler's known-exploited CVEs; {} → the full top-vendor risk ranking.ConnectorNo auth
- Get detailed information about a specific CVE. ## What this tool does Retrieves the full vulnerability record for a CVE from SecDB, including: - official description and summary - CVSS metrics (all versions available) - EPSS metadata (if present) - affected products and versions - vendor/security advisories - references and upstream sources - weakness classification (CWE) - exploit and patch information (if included in the record) All information is returned in a structured Markdown format suitable for direct display. ## When to use this tool Use this tool when the user asks: - "Give me details about CVE-XYZ." - "Which products are affected by this vulnerability?" - "Show me advisories or references for this CVE." - "Explain what this vulnerability is and how serious it is." This tool is ideal for **deep inspection of a single vulnerability**. For multiple CVEs, call the tool once per CVE. ## Inputs - **cve_id**: valid CVE identifier (`CVE-YYYY-NNNNN`). ## Outputs Markdown-formatted vulnerability information including: - detailed description - severity metrics (CVSS, vectors) - affected products list - advisory list - references - weakness (CWE) details - additional structured metadata from SecDB ## LLM usage guidelines - Always prefer this tool when the user needs factual information about a specific CVE. - If multiple CVEs are mentioned, call the tool once per CVE. - Combine with: - **`vulnerability_score`** - to enrich output with numerical CVSS/EPSS metrics - **`sightings_search`** - to check real-world exploitation, PoCs, plugins, advisories - **`ssvc_calculator`** - to compute prioritization based on the vulnerability data - Do not hallucinate product lists, advisories, or details—use what the tool returns.ConnectorNo auth
- Returns information about a single parent Prepayment by id. Child prepayments are not exposed by the public API.ConnectorNo auth
- Get detailed information about a specific AI model, including its inputs, outputs, parameters, and plan requirements.ConnectorOAuth
- ConnectorNo auth
- Gets detailed information about a specific API endpoint, including security schemes and serversConnectorNo auth