Kevscope
CVE patch priority from CISA KEV, FIRST EPSS, CVSS and SSVC; exploited-CVE feeds.
¿Debería usar esto?
Calidad y seguridad
Hallazgos (1)
- LOWTool 'epss_watchlist' description lacks action verben epss_watchlist
Basado en el análisis automatizado de las definiciones de herramientas y el cumplimiento del protocolo.
Costo de contexto
Este es el número aproximado de tokens que se consumen cada vez que las herramientas del servidor se cargan en el contexto de un modelo. Los recuentos más altos reducen la atención disponible para otras tareas.
Instalar
Instalación con un clic
Agrega esto a tu archivo `claude_desktop_config.json`:
{
"mcpServers": {
"kevscope-api": {
"url": "https://kevscope-api.cybermax-tools.workers.dev/mcp?via=mcp-registry"
}
}
}Puntos de conexión remotos
https://kevscope-api.cybermax-tools.workers.dev/mcp?via=mcp-registrystreamable-httpQué puede hacer
Inventario de herramientas
Herramientas (3)
🟢cve_priority(cves, full)
Patch-priority verdict for 1-20 CVE IDs with evidence: CISA KEV status (date added, due date, ransomware use), FIRST EPSS probability, CVSS (CNA or CISA-ADP), CISA SSVC exploitation/automatable/impact, vendor, product and links. Sorted most urgent first.
Esquema de entrada
{
"type": "object",
"properties": {
"cves": {
"type": "array",
"items": {
"type": "string"
},
"minItems": 1,
"maxItems": 20,
"description": "CVE IDs like CVE-2024-3400"
},
"full": {
"type": "boolean",
"default": false
}
},
"required": [
"cves"
]
}🟢kev_recent(days, vendor, ransomware, limit)
CVEs added to the CISA Known Exploited Vulnerabilities catalog in the last N days, newest first, with due date, ransomware use and EPSS. Optional vendor/product text filter.
Esquema de entrada
{
"type": "object",
"properties": {
"days": {
"type": "integer",
"minimum": 1,
"maximum": 365,
"default": 30
},
"vendor": {
"type": "string"
},
"ransomware": {
"type": "boolean",
"default": false
},
"limit": {
"type": "integer",
"minimum": 1,
"maximum": 100,
"default": 50
}
}
}🟢epss_watchlist(year, limit, minEpss)
The highest-EPSS CVEs (most likely to be exploited in 30 days) that are not in CISA KEV yet. Defaults to this year's CVE IDs.
Esquema de entrada
{
"type": "object",
"properties": {
"year": {
"type": "string",
"description": "e.g. 2026, or all"
},
"limit": {
"type": "integer",
"minimum": 1,
"maximum": 50,
"default": 25
},
"minEpss": {
"type": "number",
"minimum": 0,
"maximum": 1
}
}
}Comunidad
Evidencia