Distributed Risk desk

Connect Remote server

claude mcp add --transport http desk https://www.distributedrisk.com/mcp

{
  "mcpServers": {
    "desk": {
      "url": "https://www.distributedrisk.com/mcp"
    }
  }
}

{
  "servers": {
    "desk": {
      "type": "http",
      "url": "https://www.distributedrisk.com/mcp"
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://www.distributedrisk.com/mcp

Tools 16 found in our last check

• list_notes

  Published desk notes, newest first: entry number, date (the day of the official action), published (the day the desk published the note), title, status, topic (cyber or sanctions), readers, source class, a one-line summary, and the note's URL. Pages with limit and offset; total…

• search_notes

  Find published notes that mention every word of the query (a name, a list, a country, a program, a date) in the title, summary, sources or body.

• get_note

  One published note in full (Markdown), with its numbered sources and links to the official record.

• search_screening_lists

  Search the Consolidated Screening List (OFAC SDN and other Treasury lists; BIS Entity, Denied Persons, Unverified and Military End User lists; State ITAR-debarred and nonproliferation lists) by name, alias or identifier (IMO, SWIFT/BIC, registration number). Close spellings matc…

• list_ofac_actions

  OFAC's recent actions, newest first: designations and removals, general licenses, FAQs, regulations and settlements, each with its date, categories and the official page. Filter by date or words in the title.

• search_kev

  CISA's Known Exploited Vulnerabilities catalog, newest first: CVE, vendor, product, date added, federal due date, known ransomware use, the required action, FIRST's EPSS estimate, and whether it sits in the AI and agent software stack. Look up one CVE, search vendor or product w…

• search_federal_register

  Search Federal Register rules, proposed rules, notices and presidential documents: title, type, agencies, publication and effective dates, citation, abstract and the official document link. Narrow by agency (for example foreign-assets-control-office, industry-and-security-bureau…

• list_travel_advisories

  US State Department travel advisories, most recently updated first: country, level (1 to 4), the advisory's summary and the official page. Filter by country, minimum level or update date.

• get_reference_rates

  The New York Fed's reference rates: EFFR and OBFR (unsecured), SOFR, BGCR and TGCR (secured), and the SOFR averages and index (SOFRAI). With no rate, the latest of each; with a rate, its last N days, with percentiles, volume and, for EFFR, the target range.

• get_treasury_yields

  Treasury's daily par yield curve, newest first: yields by tenor from 1 month to 30 years. Ask for the last N days, and optionally only some tenors (for example ["2 Yr", "10 Yr"]).

• get_cve

  Everything the record says about one CVE, in one answer: the CVE.org record (description, severity, weakness, affected products, references), CISA's exploitation call (SSVC) and its KEV listing with the federal due date, FIRST's EPSS estimate, and whether it sits in the AI and a…

• list_cyber_advisories

  CISA's advisories, newest first: alerts, joint cybersecurity advisories (#StopRansomware, state-sponsored activity), ICS and ICS-medical advisories, and analysis reports. Each with its kind, date, summary, the CVEs it names and the official page. Filter by kind, date, words, or…

• list_cyber_incident_filings

  Cybersecurity incidents public companies report on Form 8-K, newest first: Item 1.05 (the company judged it material) and, unless excluded, Item 8.01 reports made without that judgment. Each with the company, tickers, filing and event dates, items, state, industry code and the E…

• list_ai_stack_vulnerabilities

  New advisories against the software AI agents run on, newest and most severe first: agent frameworks (LangChain, LlamaIndex, CrewAI, n8n, Langflow), LLM gateways (LiteLLM), MCP servers and SDKs, model serving (vLLM, Ollama), ML platforms (MLflow, Ray, Jupyter), model libraries,…

• check_dependencies

  Which of these package versions have a known vulnerability. Give packages directly (ecosystem, name, version), or paste a lockfile or SBOM as manifest and it is read for you: package-lock.json, pnpm-lock.yaml, yarn.lock, requirements.txt, poetry.lock, Pipfile.lock, go.mod, go.su…

• list_new_vulnerabilities

  What is new across the three vulnerability feeds, exploited first, then by severity, then newest: GitHub's reviewed advisories (the affected package range and the first patched version), NVD's newly published CVE records (software no package ecosystem carries, with NIST's scorin…

Details

More productivity servers See all

• China With Me — Hardware Prototyping & Exhibition MCP

  China hardware prototyping, verified trade show calendar, remote exhibition viewer & sourcing.

• Flamigo

  Turn notes into slides, edit presentations, compare designs, and export HTML or PowerPoint.

• humans fix ai

  Ask a real, manually approved developer for help. Nothing is sent until you say yes.

• Leaklens

  Check coding-benchmark tasks for leaked fixes: per-task tier, quote and fix-commit date.

• iinventedlight Library

  Public notes and openly licensed reference library from iinventedlight.

• Kuotia

  Spanish tax calendar, RETA and IRPF estimates and guides for autónomos in Spain, by Kuotia.