First Epss MCP Server

by cyanheads Your server? Claim it

answering

First Epss MCP Server is answering right now. Last checked 14 min ago. 571 installs a week from npm. It exposes 5 tools. Last commit 29 Oct 2026.

Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.

Installs per day peak 365 · avg 31 · +52% w/w

a month agotoday

Uptime history 9 days of history

9 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

586 ms

Response time

average over 24h

571

Installs / week

npm and PyPI

What changed 2

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 29 October 2026. No other catalogue keeps this.

29 Oct a tool description was rewritten epss_query_threshold

29 Oct a tool changed version

Nothing serious here today

Today is the operative word: we check First Epss MCP Server every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 14 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add first-epss-mcp-server --transport http https://first-epss.caseyjhand.com/mcp

Settings → Connectors → Add custom connector, then paste this address

https://first-epss.caseyjhand.com/mcp

~/.codex/config.toml

[mcp_servers.first-epss-mcp-server]
url = "https://first-epss.caseyjhand.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "first-epss-mcp-server": {
      "url": "https://first-epss.caseyjhand.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "first-epss-mcp-server": {
      "type": "http",
      "url": "https://first-epss.caseyjhand.com/mcp"
    }
  }
}

Available tools 5

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

epss

epss_get_scores

Retrieve latest available or historically dated FIRST EPSS probability and percentile for supplied CVEs. Process up to 500 unique entries from batchOffset; response byte limits can return fewer whole entries. Resume with nextBatchOffset as batchOffset, the original cves and returned score date as date. deferredCves were not queried; withheldCves were processed but omitted, and either list can be a declared preview. Missing scores remain unknown; use epss_list_reference for coverage and interpretation.

epss_get_timeseries

Retrieve an EPSS anchor and up to 30 preceding daily observations for up to 50 unique CVEs from batchOffset. Response byte limits retain whole history items. Resume CVE batches with nextBatchOffset as batchOffset, the original cves and returned score date as date; withheldCves were processed, deferredCves were not queried, and lists can be declared previews. Exact 7-day and 30-day deltas require their calendar baselines; gaps remain unknown. Model boundaries do not explain score movement. Re-anchor using previousAnchorDate for the preceding history window; that snapshot may be unavailable.

epss_list_reference

Explain FIRST EPSS interpretation, model publishing dates, lookup coverage and transparent prioritization policy. Use this static reference before interpreting missing scores, score movement or probability versus percentile thresholds.

epss_prioritize_cves

Assign remediation tiers using latest or dated EPSS and caller-supplied CVSS base severity. Defaults are severity >= 7 and EPSS probability >= 0.10; select percentile explicitly for population rank. Missing severity stays in epssOnly and missing EPSS stays unscored. Thresholds are policy conventions, not FIRST guidance. Process up to 500 unique entries from batchOffset, returning whole entries within the byte budget. Resume using nextBatchOffset as batchOffset, the original cves with original cvssBaseScore values, returned score date as date, and the same severityThreshold and likelihood. Deferred lists may be declared previews; withheldCves were already processed.

epss_query_threshold

Discover CVEs using inclusive EPSS or percentile bounds, CVE year or dataset-addition recency; filters intersect and at least one is required. Examine one candidate page in the upstream FIRST order, which is not ranked by EPSS, so the first page does not hold the highest scores. Each serialized response surface fits 65536 UTF-8 bytes; budgetLimited and withheldCount disclose whole matches withheld, with nextOffset at the first withheld match. Year filtering can return an empty page with nextOffset; candidateTotal is a broad-query total, not an exact-year total. Continue with the same filters, limit, returned score date and nextOffset.

Endpoints

URL	Transport	State	Latency	Checked
https://first-epss.caseyjhand.com/mcp	streamable-http	answering	557 ms	14 min ago

Alternatives to First Epss MCP Server

same job, measured the same way

Product Intelligence

by ponito

Compare prices across Swiss and European shops — barcode (GTIN) lookup and daily price history.

3 tools answering

SmogRank

by burettosofuto

PM2.5 air pollution by city: worst-first rankings, current air and daily history.

4 tools answering

Avahit

by avahit

Creator product picks with daily-verified store prices and Avahit's own price history.

2 tools answering

TGJU Prices

by sepehr071

Unofficial read-only TGJU: live Iranian gold, coin, currency and crypto prices with daily history.

220 installs/wk local only

Shopify Store Leads

by insanedevhq

Find Shopify stores by country, installed apps, theme or brand, with public e-mails and socials.

answering

rust.wiki

by rust

Live data for the game Rust: skin prices and history, items, item store, loot tables, servers.

57 tools answering

Bidxon — ad-free AI shopping agent

by eduardorom

Real US store prices with shipping, daily price history and real-deal checks. Never paid rankings.

2 tools answering

Google Trends Pro

by mufmo130

Unlimited keywords on one Google Trends scale, with daily history, trend status and forecasts.

answering

First Epss MCP Server — questions

Answers built from our own checks of this server.

What can First Epss MCP Server do?

It exposes 5 tools, read directly from the server on our last check. Among them: epss_get_scores, epss_get_timeseries, epss_list_reference, epss_prioritize_cves, epss_query_threshold. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is First Epss MCP Server working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 586 ms. The bar chart above shows every period we have measured.

How do I connect First Epss MCP Server?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does First Epss MCP Server need an API key?

No. First Epss MCP Server completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 5 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is First Epss MCP Server?

It answers our handshake in 586 ms on average, which is faster than 19% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.

How many people use First Epss MCP Server?

The npm package @cyanheads/first-epss-mcp-server was installed 571 times in the last week. Week over week that is +52%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is First Epss MCP Server open source?

The code is open source: it is published under the Apache-2.0 licence, written in TypeScript, 1 stars on GitHub and 3 open issues. The licence covers the code in the repository, not the hosted service at first-epss.caseyjhand.com, which runs on its operator's own terms.