Back to Browse

Cisa Kev MCP Server

Developer ToolsLow Risk9.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

Use this MCP server to CISA Known Exploited Vulnerabilities catalog search. Tools include search...

About

Use this MCP server to CISA Known Exploited Vulnerabilities catalog search. Tools include search...

Security Report

9.0
Low Risk9.0Low Risk

Valid MCP server (3 strong, 3 medium validity signals). 1 known CVE in dependencies (0 critical, 1 high severity) Package registry verified. Imported from the Official MCP Registry.

5 files analyzed · 2 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-mrfentmen-cisa-kev-mcp": {
      "args": [
        "-y",
        "cisa-kev-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

cisa-kev-mcp

Search CISA's Known Exploited Vulnerabilities catalog. This is a focused companion to vulnerability scanners: it helps an agent identify vulnerabilities that CISA has marked as exploited in the wild.

Tools

  • search_known_exploited: search CVE, vendor, product, vulnerability name, and description fields.
  • recent_known_exploited: list recently added catalog entries.
  • catalog_info: inspect catalog version, release date, and entry count.

The feed is public and keyless. Catalog inclusion is a prioritization signal, not a complete risk assessment or a guarantee that a system is vulnerable.

Run

npm install
npm run build
node dist/index.js

Reviews

No reviews yet

Be the first to review this server!