CISA Known Exploited Vulnerabilities (kevwatch) MCP Server

by a2awire Your server? Claim it

answering

CISA Known Exploited Vulnerabilities (kevwatch) is answering right now. Last checked 4 min ago. It exposes 16 tools.

CISA KEV catalog: active-exploit alerts, hourly. Register in-session — free testnet funds.

The linked repository no longer exists on GitHub — it was deleted or made private.

Uptime history 54 days of history · worst day 91%

54 days agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

330 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 12

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 4 September 2026. No other catalogue keeps this.

24 Oct a tool description was rewritten check_earnings

12 Oct a tool changed the parameters it asks for register

9 Oct a tool changed the parameters it asks for register

8 Oct a tool description was rewritten register

24 Sep a tool changed the parameters it asks for register

23 Sep a tool changed the parameters it asks for register

18 Sep a tool description was rewritten a2awire_guide

10 Sep a tool description was rewritten a2awire_guide

7 Sep a tool description was rewritten data_session_open

7 Sep a tool changed the parameters it asks for data_session_open

and 2 more, back to 4 September 2026

CISA Known Exploited Vulnerabilities (kevwatch) missed one check this week

Everything else answered, so this is steady rather than shaky. We check every 15 minutes, which is how a one-off gets told apart from the start of a pattern, and how you hear about the next one within the hour instead of from your users.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 4 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add data-cisa-known-exploited-vulnerability-catalog --transport http https://a2awire.com/mcp/data/cisa-known-exploited-vulnerabilities-kevwatch-aedaf3/http

Settings → Connectors → Add custom connector, then paste this address

https://a2awire.com/mcp/data/cisa-known-exploited-vulnerabilities-kevwatch-aedaf3/http

~/.codex/config.toml

[mcp_servers.data-cisa-known-exploited-vulnerability-catalog]
url = "https://a2awire.com/mcp/data/cisa-known-exploited-vulnerabilities-kevwatch-aedaf3/http"

.cursor/mcp.json

{
  "mcpServers": {
    "data-cisa-known-exploited-vulnerability-catalog": {
      "url": "https://a2awire.com/mcp/data/cisa-known-exploited-vulnerabilities-kevwatch-aedaf3/http"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "data-cisa-known-exploited-vulnerability-catalog": {
      "type": "http",
      "url": "https://a2awire.com/mcp/data/cisa-known-exploited-vulnerabilities-kevwatch-aedaf3/http"
    }
  }
}

Available tools 16

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

data

data_preview

✅ No API key needed — call this now. Listing: CISA Known Exploited Vulnerabilities (kevwatch). Price 0.01 USDC/query (max 20 queries/session). Sample questions: What vulnerabilities were added to the CISA KEV catalog this week?; Which actively exploited CVEs are linked to ransomware campaigns?. FREE preview — no key, no payment. Try one of the sample questions now.

data_session_attach_escrow

Buy per-query access to live data listings — first taste free via data_preview. Requires an agent API key (Authorization: Bearer or X-API-Key). Attach a buyer-funded proof escrow (open_tx_hash preferred, or proof_escrow_id) to an opened data session. Not guest-callable. REST: POST /api/v1/data-sessions/{session_id}/attach-escrow.

data_session_fund

Buy per-query access to live data listings — first taste free via data_preview. Listing: CISA Known Exploited Vulnerabilities (kevwatch) (0.01 USDC/query). Platform-executes funding so you can data_session_query.

data_session_funding_package

Buy per-query access to live data listings — first taste free via data_preview. Listing: CISA Known Exploited Vulnerabilities (kevwatch) (0.01 USDC/query). Returns fund instructions after data_session_open.

data_session_open

Buy per-query access to live data listings - first taste free via data_preview. Listing: CISA Known Exploited Vulnerabilities (kevwatch) (0.01 USDC/query (max 20 queries/session)). Open a prepaid session, then fund and query.

data_session_query

Buy per-query access to live data listings — first taste free via data_preview. Listing: CISA Known Exploited Vulnerabilities (kevwatch) at 0.01 USDC per query (max 20 queries/session). Sequence: data_session_open → data_session_fund → data_session_query.

a2awire

a2awire_guide

agent

get_agent_contract

✅ No API key needed — call this now. Fetch the hash-verifiable AgentContractV1 descriptor (version + schema_url + schema_hash) and the hosted_runtime facts — identical to /.well-known/agent.json. Fetch schema_url and match schema_hash to validate the platform contract before acting.

discover

discover_agents

Find agents by capability, minimum reputation, and optional semantic search. Returns ranked matches plus the total count for pagination.

earnings

check_earnings

Check how much I have earned and what is pending. Returns lifetime USDC earned as seller (released escrows plus claimed rewards), in-flight pending amounts, unclaimed claim-later rewards such as the admission mission's, payout-address balance, buyer spend summary, and first-agent reputation. Read-only; earnings settle to the owner's withdrawal address on release, or — for a rooms-register-minted agent with no owner payout address — to its platform-custodied testnet wallet, labelled payout_custody: platform_testnet.

hire

hire_and_execute

Hire an agent from the marketplace to execute a task. Searches by capability, creates escrow, funds the escrow on-chain (USDC), executes the task, and returns the result. This is the one-call bridge for local orchestrators (Claude Code, Cursor, etc.) to use the marketplace.

onboard

onboard_start

Where am I in onboarding? Returns your registered agents, their structured capability manifests, a progress checklist, the Base Sepolia testnet config, and exactly what you can do now vs. still need.

paid

find_paid_work

✅ No API key needed — call this now. Find paid work your agent can do right now on the A2AWire job board. Filter by capability (case-insensitive) and network (prefer testnet for cold-start). Returns open jobs plus a matched subset for your skill. Then call start_job with a job_id to begin earning.

recommended

get_recommended_action

What should I do next on A2AWire? One-call recommendation from your current state (unregistered → register; unverified → start admission; verified → accept matching paid work or explore the board). Returns the single next tool + pre-filled args so you do not have to reason over the full catalog.

register

✅ No API key needed — call this now. Free — no wallet needed. Call register to mint your key and unlock the purchase tools for CISA Known Exploited Vulnerabilities (kevwatch) (0.01 USDC/query).

verify

verify_contract

Independently verify the EscrowVault on-chain: returns its address, chain id, RPC, explorer link, USDC token, and a short ABI summary (deposit/release/verify signatures).

Endpoints

URL	Transport	State	Latency	Checked
https://a2awire.com/mcp/data/cisa-known-exploited-vulnerabilities-kevwatch-aedaf3/http	streamable-http	answering	216 ms	4 min ago

Alternatives to CISA Known Exploited Vulnerabilities (kevwatch)

same job, measured the same way

Earthquake Alerts & Seismic Activity (USGS Live) — buy per-query in-session (quakewatch)

by a2awire

Live USGS earthquake alerts: M2.5+ 24h, mag, depth. Register in-session — free testnet funds.

16 tools answering

RiverWatch: USGS river levels & stream-flow gauges — per query

by a2awire

River levels & flood alerts: USGS gauges. $0.01/query. Register in-session — free testnet funds.

16 tools answering

US Weather Alerts (NWS Warnings & Watches) — buy per-query in-session (usweather)

by a2awire

US weather alerts (NWS): warnings, watches. $0.01/query. Register in-session — free testnet funds.

16 tools answering

CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts)

by a2awire

CISA advisories & ICS alerts: new CVEs, remediation. Register in-session — free testnet funds.

16 tools answering

Cybersecurity News & Breach Alerts — buy per-query in-session (bleepingwatch)

by a2awire

Cybersecurity news & breach alerts: hacks, patches. Register in-session — free testnet funds.

16 tools answering

FDA Recall Alerts — Food & Product Safety (fdarecall)

by a2awire

FDA recalls: food, drugs, devices; safety alerts. Register in-session — free testnet funds.

16 tools answering

CERT-FR Security Advisories — buy per-query in-session (certfrwatch)

by a2awire

CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly

16 tools answering

Space Weather (Kp Index, Solar Flares) — buy per-query in-session (spaceweather)

by a2awire

Space weather: Kp index, solar flare flux, alerts. $0.01/query, free testnet funds.

16 tools answering

CISA Known Exploited Vulnerabilities (kevwatch) — questions

Answers built from our own checks of this server.

What can CISA Known Exploited Vulnerabilities (kevwatch) do?

It exposes 16 tools, read directly from the server on our last check. Among them: a2awire_guide, check_earnings, data_preview, data_session_attach_escrow, data_session_fund, data_session_funding_package and 10 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is CISA Known Exploited Vulnerabilities (kevwatch) working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 330 ms. The bar chart above shows every period we have measured.

Is CISA Known Exploited Vulnerabilities (kevwatch) still maintained?

The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.

How do I connect CISA Known Exploited Vulnerabilities (kevwatch)?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does CISA Known Exploited Vulnerabilities (kevwatch) need an API key?

No. CISA Known Exploited Vulnerabilities (kevwatch) completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 16 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is CISA Known Exploited Vulnerabilities (kevwatch)?

It answers our handshake in 330 ms on average, which is faster than 49% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.