@pipeworx/cisa-kev

Connect: https://gateway.pipeworx.io/cisa-kev/mcp · Install: one-click buttons

Tools: 4

CISA Known Exploited Vulnerabilities catalog MCP — actively exploited CVEs with required-action dates. Keyless. Cached 1h in-pack.

Tools

  • catalog() — full KEV catalog (metadata + entries)
  • entry(cve_id) — single KEV entry by CVE id
  • vendors() — list distinct vendors with entries
  • recent(days) — entries added in the last N days

Data source

https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json

Tools

  • catalog — Full KEV catalog (metadata + entries).
  • entry — Single KEV entry by CVE id.
  • vendors — Return all distinct vendor/project names in the CISA KEV catalog sorted by entry count descending, with per-vendor counts. Useful for identifying which vendors have the most actively-exploited vulnera
  • recent — Entries added in the last N days.

Tools

  • catalog — Full KEV catalog (metadata + entries).
  • entry — Single KEV entry by CVE id.
  • recent — Entries added in the last N days.
  • vendors — Return all distinct vendor/project names in the CISA KEV catalog sorted by entry count descending, with per-vendor counts. Useful for identifying which vendors have the most actively-exploited vulnera

Regenerated from source · build July 4, 2026