FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit MCP Server

by ceadigital Your server? Claim it

answering

FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit is answering right now. Last checked 2 min ago. It exposes 28 tools.

Real-time FIRST.org EPSS 30-day CVE exploit probability scoring and OSV package security audit.

Uptime history 44 hours of history

44 hours agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

224 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 1

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 6 November 2026. No other catalogue keeps this.

6 Nov a tool appeared agent_url_to_clean_markdown

Nothing serious here today

Today is the operative word: we check FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add epss-cve-exploit-score --transport http https://ceadigital.io/mcp/epss

Settings → Connectors → Add custom connector, then paste this address

https://ceadigital.io/mcp/epss

~/.codex/config.toml

[mcp_servers.epss-cve-exploit-score]
url = "https://ceadigital.io/mcp/epss"

.cursor/mcp.json

{
  "mcpServers": {
    "epss-cve-exploit-score": {
      "url": "https://ceadigital.io/mcp/epss"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "epss-cve-exploit-score": {
      "type": "http",
      "url": "https://ceadigital.io/mcp/epss"
    }
  }
}

Available tools 28

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

agent

agent_base_tx_simulate

High-velocity Agent Operational Primitive ($0.005 USDC on Base): Pre-execution Base L2 (eip155:8453) calldata simulator & wallet drain guard via eth_call + eth_estimateGas + unlimited ERC-20 approve detection.

agent_clean_web_grounding

High-velocity Agent Operational Primitive ($0.008 USDC on Base): Fast, token-optimized real-time web grounding & clean Markdown synthesis stripped of HTML bloat, ads, and scripts for LLM context windows.

agent_compliance_notary_attest

Tamper-evident SHA-256 hash-chained Agent Decision & Compliance Notary for EU AI Act, NIST AI RMF, and SOC2 autonomous agent audit trails.

agent_token_intel_and_honeypot

High-velocity Agent Operational Primitive ($0.005 USDC on Base): Real-time DEX pool liquidity, 24h volume, buy/sell execution symmetry, Base bytecode check, and deterministic 0-100 Honeypot & Anti-Rug Safety Score.

agent_url_to_clean_markdown

High-velocity Agent Operational Primitive ($0.005 USDC on Base): Live URL-to-Clean-Markdown extractor competing with Firecrawl/Jina. Fetches any public URL via SSRF-safe HTTP + LegalTDMGuard and returns clean, prompt-injection-scrubbed Markdown.

cfpb

cfpb_complaints

Query US Consumer Financial Protection Bureau (CFPB) complaint database (17 U.S.C. § 105 public domain).

cisa

cisa_kev_exploited_vulns

Query US CISA Known Exploited Vulnerabilities (KEV) Catalog for active in-the-wild exploitation, mandatory federal patch due dates, and ransomware usage.

corporate

corporate_kyb_and_risk_dossier

5-Source Parallel Composite Dossier: Joins GLEIF LEI + SEC EDGAR + CFPB Complaints + USASpending Federal Awards + FDIC in <400ms with a 0-100 Counterparty Verification Score.

crtsh

crtsh_cert_recon

Query Sectigo Certificate Transparency logs (crt.sh) for issued SSL/TLS certificates and subdomains.

cyber

cyber_supply_chain_security_dossier

5-Source Parallel Security Dossier: Joins crt.sh SSL Certs + Google deps.dev OpenSSF Scorecard + FIRST.org EPSS + CISA KEV + OSV.dev CVEs in <400ms with a 0-100 Security Posture Score.

depsdev

depsdev_openssf_scorecard

Query Google Open Source Insights (deps.dev) and Linux Foundation OpenSSF Security Scorecard (0-10) for any GitHub repository or package (#1 in MCP Registry).

dexscreener

dexscreener_token_audit

Real-time DEX liquidity, price, pair volume, and market cap analytics via DexScreener.

epss

epss_exploit_score

Query FIRST.org Exploit Prediction Scoring System (EPSS) for 30-day real-world exploit probability.

fdic

fdic_bank_health

Factual public supervisory bank health and branch metrics compiled from FDIC under 12 CFR Part 328.

gcp

gcp_catalog_search

Sub-millisecond FTS5 search across 17,671 Google Cloud, Vertex AI, and A2A service records.

github

github_repo_pulse

Extract repository activity pulse (stars, forks, open issues, license, last push) with ETag caching.

gleif

gleif_lei_kyb

Query Global Legal Entity Identifier Foundation (GLEIF) registry for corporate KYB and LEI records.

npi

npi_medical_registry

CMS NPPES NPI Registry lookup for healthcare organizations and facilities (NPI-2 only, HIPAA safe harbor).

nyfed

nyfed_sofr_reference_rates

Query Federal Reserve Bank of New York official Secured Overnight Financing Rate (SOFR) benchmark rates, percentiles, and daily repo volume (#1 in MCP Registry).

openalex

openalex_citation_graph

Academic citation graph metadata and scholarly network metrics from OpenAlex (CC0).

package

package_health_pulse

Parallel health pulse inspection across NPM and PyPI ecosystems.

provision

provision_free_developer_key

FREE Self-Serve API Key Generator: Instantly mints a 50-call free starter `cea_live_` Bearer token with copy-paste snippets for Claude Desktop, Cursor, Windsurf, ElizaOS, and Coinbase AgentKit.

sec

sec_edgar_cik_lookup

SEC EDGAR company submission facts, quarterly filings, and CIK lookup under Lowe v. SEC Publisher's Exclusion.

security

security_cve_audit

Audit package vulnerabilities and CVE advisories via OSV.dev database.

submit

submit_feedback_or_rate_quote

Free interactive MCP feedback, feature requests, and custom rate quote negotiation (alias: submit_mcp_feedback_or_request).

usaspending

usaspending_awards

Query USASpending.gov Federal Awards and Contractor Intelligence (17 U.S.C. § 105 public domain).

usgs

usgs_seismic_hazard

Seismic activity and earthquake risk profiles from USGS GeoJSON services.

vault

vault_knowledge_search

FTS5 search across 36,628 video transcript chunks and 106,308 knowledge graph triples in vault.db.

Endpoints

URL	Transport	State	Latency	Checked
https://ceadigital.io/mcp/epss	streamable-http	answering	221 ms	2 min ago

Alternatives to FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit

same job, measured the same way

Fetter MCP

by fetter-io

Real-time Python package and vulnerability data for AI coding agents.

3 tools answering

Seal Security

by sealsecurity

Vulnerability management: scan projects, search sealed packages, manage sealing rules and reports.

answering

Osv MCP

by mrfentmen

Use this MCP server to OSV open source vulnerability data and package security checks. Tools...

68 installs/wk local only

AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)

by agentdiet

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.

2 tools answering

AgentGuard — security checks for AI agents

by shuaicongxiaomai

Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

local only

Purify Security Feeds

by eason4kim-rocket

Query CISA KEV / EPSS vulnerability feeds with full per-record provenance and auditable versions

local only

Vuln Triage MCP

by kimmawla

Tells your AI agent which vulnerabilities to fix first, using OSV.dev, FIRST EPSS, and CISA KEV.

123 installs/wk local only

KEVWire

by kevwire

Exploited vulnerabilities, critical CVEs, breaches and AI security incidents, with primary sources.

5 tools answering

FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit — questions

Answers built from our own checks of this server.

What can FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit do?

It exposes 28 tools, read directly from the server on our last check. Among them: agent_base_tx_simulate, agent_clean_web_grounding, agent_compliance_notary_attest, agent_token_intel_and_honeypot, agent_url_to_clean_markdown, cfpb_complaints and 22 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 224 ms. The bar chart above shows every period we have measured.

How do I connect FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit need an API key?

No. FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 28 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit?

It answers our handshake in 224 ms on average, which is faster than 65% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.