First Epss MCP Server
Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.
Connect it
Settings → Connectors → Add custom connector
URL: https://first-epss.caseyjhand.com/mcpSettings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://first-epss.caseyjhand.com/mcp{
"mcpServers": {
"first-epss-mcp-server": {
"url": "https://first-epss.caseyjhand.com/mcp"
}
}
}claude mcp add --transport http first-epss-mcp-server https://first-epss.caseyjhand.com/mcp{
"servers": {
"first-epss-mcp-server": {
"type": "http",
"url": "https://first-epss.caseyjhand.com/mcp"
}
}
}{
"mcpServers": {
"first-epss-mcp-server": {
"command": "npx",
"args": [
"-y",
"@cyanheads/first-epss-mcp-server@0.1.3"
]
}
}
}claude mcp add first-epss-mcp-server -- npx -y @cyanheads/first-epss-mcp-server@0.1.35 tools, pulled live
epss_get_scoresread-onlyRetrieve latest available or historically dated FIRST EPSS probability and percentile for supplied CVEs. Process up to 500 unique entries from batchOffset; response byte limits can return fewer whole entries. Resume with nextBatchOffset as batchOffset, the original cves and returned score date as date. deferredCves were not queried; withheldCves were processed but omitted, and either list can be a
epss_get_timeseriesread-onlyRetrieve an EPSS anchor and up to 30 preceding daily observations for up to 50 unique CVEs from batchOffset. Response byte limits retain whole history items. Resume CVE batches with nextBatchOffset as batchOffset, the original cves and returned score date as date; withheldCves were processed, deferredCves were not queried, and lists can be declared previews. Exact 7-day and 30-day deltas require t
epss_query_thresholdread-onlyDiscover CVEs using inclusive EPSS or percentile bounds, CVE year or dataset-addition recency; filters intersect and at least one is required. Examine one candidate page ordered by EPSS descending. Each serialized response surface fits 65536 UTF-8 bytes; budgetLimited and withheldCount disclose whole matches withheld, with nextOffset at the first withheld match. Year filtering can return an empty
epss_prioritize_cvesread-onlyAssign remediation tiers using latest or dated EPSS and caller-supplied CVSS base severity. Defaults are severity >= 7 and EPSS probability >= 0.10; select percentile explicitly for population rank. Missing severity stays in epssOnly and missing EPSS stays unscored. Thresholds are policy conventions, not FIRST guidance. Process up to 500 unique entries from batchOffset, returning whole entries wit
epss_list_referenceread-onlyExplain FIRST EPSS interpretation, model publishing dates, lookup coverage and transparent prioritization policy. Use this static reference before interpreting missing scores, score movement or probability versus percentile thresholds.
Alternatives in Developer Tools
Compare →
Compiler ExplorerA
Compile code with thousands of compilers, inspect the assembly, and share godbolt.org links
MIMiroOfficialA
Official Miro MCP server - Supports context to code and creating diagrams, docs, and data tables.
Context7A
Up-to-date docs for AI agents
OMOmnaraA
Deploy durable AI agents with Omnara, an open-source managed-agent platform.
AAAirbyte AgentsOfficialA
Let AI agents query data and act across all your business apps via MCP.
ARApple RagA
Apple developer docs and WWDC transcripts with RAG retrieval and Jev relevance ranking.