protogrid

Search / io.ceadigital/epss-cve-exploit-score

FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit

R0· no sign-in

Real-time FIRST.org EPSS 30-day CVE exploit probability scoring and OSV package security audit.

v1.0.0 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality81new
Trust83of 100
Uptime, 30 days100%
Latency p50177 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "epss-cve-exploit-score": {
      "type": "http",
      "url": "https://ceadigital.io/mcp/epss"
    }
  }
}
claude mcp add --transport http epss-cve-exploit-score https://ceadigital.io/mcp/epss
[mcp_servers.epss-cve-exploit-score]
url = "https://ceadigital.io/mcp/epss"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "epss-cve-exploit-score": {
      "type": "remote",
      "url": "https://ceadigital.io/mcp/epss",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "epss-cve-exploit-score": {
      "type": "http",
      "url": "https://ceadigital.io/mcp/epss"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=epss-cve-exploit-score&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vY2VhZGlnaXRhbC5pby9tY3AvZXBzcyJ9"
}
{
  "servers": {
    "epss-cve-exploit-score": {
      "type": "http",
      "url": "https://ceadigital.io/mcp/epss"
    }
  }
}
{
  "mcpServers": {
    "epss-cve-exploit-score": {
      "httpUrl": "https://ceadigital.io/mcp/epss"
    }
  }
}
extensions:
  "epss-cve-exploit-score":
    enabled: true
    name: "epss-cve-exploit-score"
    type: streamable_http
    uri: "https://ceadigital.io/mcp/epss"
    timeout: 300

Quality 81 / 100new

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-03-26; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene86 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations28 of 28 tools declare readOnlyHint or destructiveHint
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: crtsh_cert_recon (idempotentHint); agent_base_tx_simulate (idempotentHint); epss_exploit_score (idempotentHint); …
  • pass
    tools.token_costabout 3,734 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pulltool history recorded for 1 of the 7 days needed
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

28 tools, about 3,734 tokens to load them all · tool set 046ae45c7289 · tools last changed 2026-11-06 · checked 2026-11-07 18:01 UTC

Tool changes

  • agent_url_to_clean_markdownadded

    High-velocity Agent Operational Primitive ($0.005 USDC on Base): Live URL-to-Clean-Markdown extractor competing with Firecrawl/Jina. Fetches any public URL via SSRF-safe HTTP + LegalTDMGuard and returns clean, prompt-injection-scrubbed Markdown.

  • provision_free_developer_keyadded

    FREE Self-Serve API Key Generator: Instantly mints a 50-call free starter `cea_live_` Bearer token with copy-paste snippets for Claude Desktop, Cursor, Windsurf, ElizaOS, and Coinbase AgentKit.

  • agent_base_tx_simulateadded

    High-velocity Agent Operational Primitive ($0.005 USDC on Base): Pre-execution Base L2 (eip155:8453) calldata simulator & wallet drain guard via eth_call + eth_estimateGas + unlimited ERC-20 approve detection.

  • agent_clean_web_groundingadded

    High-velocity Agent Operational Primitive ($0.008 USDC on Base): Fast, token-optimized real-time web grounding & clean Markdown synthesis stripped of HTML bloat, ads, and scripts for LLM context windows.

  • agent_token_intel_and_honeypotadded

    High-velocity Agent Operational Primitive ($0.005 USDC on Base): Real-time DEX pool liquidity, 24h volume, buy/sell execution symmetry, Base bytecode check, and deterministic 0-100 Honeypot & Anti-Rug Safety Score.

  • submit_feedback_or_rate_quoteadded

    Free interactive MCP feedback, feature requests, and custom rate quote negotiation (alias: submit_mcp_feedback_or_request).

  • agent_compliance_notary_attestadded

    Tamper-evident SHA-256 hash-chained Agent Decision & Compliance Notary for EU AI Act, NIST AI RMF, and SOC2 autonomous agent audit trails.

  • cyber_supply_chain_security_dossieradded

    5-Source Parallel Security Dossier: Joins crt.sh SSL Certs + Google deps.dev OpenSSF Scorecard + FIRST.org EPSS + CISA KEV + OSV.dev CVEs in <400ms with a 0-100 Security Posture Score.

  • corporate_kyb_and_risk_dossieradded

    5-Source Parallel Composite Dossier: Joins GLEIF LEI + SEC EDGAR + CFPB Complaints + USASpending Federal Awards + FDIC in <400ms with a 0-100 Counterparty Verification Score.

  • cisa_kev_exploited_vulnsadded

    Query US CISA Known Exploited Vulnerabilities (KEV) Catalog for active in-the-wild exploitation, mandatory federal patch due dates, and ransomware usage.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository
provenance55
liveness100
freshness100
hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-2d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://ceadigital.io/mcp/epss streamable-httpnoneyes100%177 ms2025-03-262026-11-07

Tools (28)

agent_base_tx_simulateread-onlyHigh-velocity Agent Operational Primitive ($0.005 USDC on Base): Pre-execution Base L2 (eip155:8453) calldata simulator & wallet drain guard via eth_call + eth_estimateGas + unlimited ERC-20 approve detection.
agent_clean_web_groundingread-onlyHigh-velocity Agent Operational Primitive ($0.008 USDC on Base): Fast, token-optimized real-time web grounding & clean Markdown synthesis stripped of HTML bloat, ads, and scripts for LLM context windows.
agent_compliance_notary_attestread-onlyTamper-evident SHA-256 hash-chained Agent Decision & Compliance Notary for EU AI Act, NIST AI RMF, and SOC2 autonomous agent audit trails.
agent_token_intel_and_honeypotread-onlyHigh-velocity Agent Operational Primitive ($0.005 USDC on Base): Real-time DEX pool liquidity, 24h volume, buy/sell execution symmetry, Base bytecode check, and deterministic 0-100 Honeypot & Anti-Rug Safety Score.
agent_url_to_clean_markdownread-onlyHigh-velocity Agent Operational Primitive ($0.005 USDC on Base): Live URL-to-Clean-Markdown extractor competing with Firecrawl/Jina. Fetches any public URL via SSRF-safe HTTP + LegalTDMGuard and returns clean, prompt-injection-scrubbed Markdown.
cfpb_complaintsread-onlyQuery US Consumer Financial Protection Bureau (CFPB) complaint database (17 U.S.C. § 105 public domain).
cisa_kev_exploited_vulnsread-onlyQuery US CISA Known Exploited Vulnerabilities (KEV) Catalog for active in-the-wild exploitation, mandatory federal patch due dates, and ransomware usage.
corporate_kyb_and_risk_dossierread-only5-Source Parallel Composite Dossier: Joins GLEIF LEI + SEC EDGAR + CFPB Complaints + USASpending Federal Awards + FDIC in <400ms with a 0-100 Counterparty Verification Score.
crtsh_cert_reconread-onlyQuery Sectigo Certificate Transparency logs (crt.sh) for issued SSL/TLS certificates and subdomains.
cyber_supply_chain_security_dossierread-only5-Source Parallel Security Dossier: Joins crt.sh SSL Certs + Google deps.dev OpenSSF Scorecard + FIRST.org EPSS + CISA KEV + OSV.dev CVEs in <400ms with a 0-100 Security Posture Score.
depsdev_openssf_scorecardread-onlyQuery Google Open Source Insights (deps.dev) and Linux Foundation OpenSSF Security Scorecard (0-10) for any GitHub repository or package (#1 in MCP Registry).
dexscreener_token_auditread-onlyReal-time DEX liquidity, price, pair volume, and market cap analytics via DexScreener.
epss_exploit_scoreread-onlyQuery FIRST.org Exploit Prediction Scoring System (EPSS) for 30-day real-world exploit probability.
fdic_bank_healthread-onlyFactual public supervisory bank health and branch metrics compiled from FDIC under 12 CFR Part 328.
gcp_catalog_searchread-onlySub-millisecond FTS5 search across 17,671 Google Cloud, Vertex AI, and A2A service records.
github_repo_pulseread-onlyExtract repository activity pulse (stars, forks, open issues, license, last push) with ETag caching.
gleif_lei_kybread-onlyQuery Global Legal Entity Identifier Foundation (GLEIF) registry for corporate KYB and LEI records.
npi_medical_registryread-onlyCMS NPPES NPI Registry lookup for healthcare organizations and facilities (NPI-2 only, HIPAA safe harbor).
nyfed_sofr_reference_ratesread-onlyQuery Federal Reserve Bank of New York official Secured Overnight Financing Rate (SOFR) benchmark rates, percentiles, and daily repo volume (#1 in MCP Registry).
openalex_citation_graphread-onlyAcademic citation graph metadata and scholarly network metrics from OpenAlex (CC0).
package_health_pulseread-onlyParallel health pulse inspection across NPM and PyPI ecosystems.
provision_free_developer_keyread-onlyFREE Self-Serve API Key Generator: Instantly mints a 50-call free starter `cea_live_` Bearer token with copy-paste snippets for Claude Desktop, Cursor, Windsurf, ElizaOS, and Coinbase AgentKit.
sec_edgar_cik_lookupread-onlySEC EDGAR company submission facts, quarterly filings, and CIK lookup under Lowe v. SEC Publisher's Exclusion.
security_cve_auditread-onlyAudit package vulnerabilities and CVE advisories via OSV.dev database.
submit_feedback_or_rate_quoteread-onlyFree interactive MCP feedback, feature requests, and custom rate quote negotiation (alias: submit_mcp_feedback_or_request).
usaspending_awardsread-onlyQuery USASpending.gov Federal Awards and Contractor Intelligence (17 U.S.C. § 105 public domain).
usgs_seismic_hazardread-onlySeismic activity and earthquake risk profiles from USGS GeoJSON services.
vault_knowledge_searchread-onlyFTS5 search across 36,628 video transcript chunks and 106,308 knowledge graph triples in vault.db.

Schemas: list_tools.

Similar MCP servers

More from io.ceadigital

And 14 more from this publisher.

Official server.json
{
  "name": "io.ceadigital/epss-cve-exploit-score",
  "title": "FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://ceadigital.io/mcp/epss",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "websiteUrl": "https://ceadigital.io",
  "description": "Real-time FIRST.org EPSS 30-day CVE exploit probability scoring and OSV package security audit."
}