Epss MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 480 installs a week from npm. Last commit 2 Nov 2026.
Exploit Prediction Scoring System scores: how likely a CVE will be exploited in the next 30 days.
Today is the operative word: we check Epss MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add epss-mcp -- npx -y @mrfentmen/epss-mcp
{
"mcpServers": {
"epss-mcp": {
"command": "npx",
"args": [
"-y",
"@mrfentmen/epss-mcp"
]
}
}
}
[mcp_servers.epss-mcp]
command = "npx"
args = ["-y", "@mrfentmen/epss-mcp"]
{
"mcpServers": {
"epss-mcp": {
"command": "npx",
"args": [
"-y",
"@mrfentmen/epss-mcp"
]
}
}
}
{
"servers": {
"epss-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@mrfentmen/epss-mcp"
]
}
}
}
FIRST.org EPSS (Exploit Prediction Scoring System) MCP.
Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.
Rebuilds the scores real systems run on you — credit, actuarial, lending — in the open, cited.
Actively exploited? End of life? Which version fixes it? CVE verdicts for server software.
Cron expression helper: explain a schedule in plain words and list its next run times, with
Learn a designer's repetitive command patterns and surface the next likely action, cutting the...
Public events listed on Zonori for the next 7 days, by place and activity, with links.
Predicts the DDL a dbt change will execute, before you run it. Reads files, not the warehouse.
Answers built from our own checks of this server.