Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Use this when the user asks whether a CVE is exploited, how severe it is, or which vulnerabilities to patch first ("is CVE-… exploited", "prioritise these CVEs", "KEV status", "EPSS score"). Pass up to 20 CVE IDs (or text containing them). Returns CISA KEV status, EPSS, CVSS, SSVC and a sorted verdict with reasons.
Use this when the user asks whether a CVE is exploited, how severe it is, or which vulnerabilities to patch first ("is CVE-… exploited", "prioritise these CVEs", "KEV status", "EPSS score"). Pass up to 20 CVE IDs (or text containing them). Returns CISA KEV status, EPSS, CVSS, SSVC and a sorted verdict with reasons.
| Argument |
|---|
| Type |
|---|
| Description |
|---|
| cves* | array |
{
"type": "object",
"required": [
"cves"
],
"properties": {
"cves": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 20,
"minItems": 1
}
},
"additionalProperties": false
}Use this when the user asks which vulnerabilities CISA recently added to the Known Exploited Vulnerabilities catalog, optionally for one vendor or product ("new KEV entries this week", "exploited Microsoft vulnerabilities this month", "ransomware-linked CVEs").
| Argument | Type | Description |
|---|---|---|
| days | number | |
| limit | number | |
| vendor | string | |
| ransomwareOnly | boolean |
{
"type": "object",
"properties": {
"days": {
"type": "number",
"default": 30,
"maximum": 365
},
"limit": {
"type": "number",
"default": 25,
"maximum": 100
},
"vendor": {
"type": "string"
},
"ransomwareOnly": {
"type": "boolean"
}
},
"additionalProperties": false
}