Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.
Connect Remote server
claude mcp add --transport http first-epss-mcp-server https://first-epss.caseyjhand.com/mcp
{
"mcpServers": {
"first-epss-mcp-server": {
"url": "https://first-epss.caseyjhand.com/mcp"
}
}
}
{
"servers": {
"first-epss-mcp-server": {
"type": "http",
"url": "https://first-epss.caseyjhand.com/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://first-epss.caseyjhand.com/mcp
Tools 5 found in our last check
epss_get_scoresRetrieve latest available or historically dated FIRST EPSS probability and percentile for supplied CVEs. Process up to 500 unique entries from batchOffset; response byte limits can return fewer whole entries. Resume with nextBatchOffset as batchOffset, the original cves and retu…
epss_get_timeseriesRetrieve an EPSS anchor and up to 30 preceding daily observations for up to 50 unique CVEs from batchOffset. Response byte limits retain whole history items. Resume CVE batches with nextBatchOffset as batchOffset, the original cves and returned score date as date; withheldCves w…
epss_query_thresholdDiscover CVEs using inclusive EPSS or percentile bounds, CVE year or dataset-addition recency; filters intersect and at least one is required. Examine one candidate page in the upstream FIRST order, which is not ranked by EPSS, so the first page does not hold the highest scores.…
epss_prioritize_cvesAssign remediation tiers using latest or dated EPSS and caller-supplied CVSS base severity. Defaults are severity >= 7 and EPSS probability >= 0.10; select percentile explicitly for population rank. Missing severity stays in epssOnly and missing EPSS stays unscored. Thresholds a…
epss_list_referenceExplain FIRST EPSS interpretation, model publishing dates, lookup coverage and transparent prioritization policy. Use this static reference before interpreting missing scores, score movement or probability versus percentile thresholds.
Details
| Endpoint | https://first-epss.caseyjhand.com/mcp (Streamable HTTP) |
| Package | @cyanheads/[email protected] (NPM, stdio) |
| Package | @cyanheads/[email protected] (NPM, streamable-http) |
| First published | 29 Oct 2026 |
| Last updated | 29 Oct 2026 |
| Registry name | io.github.cyanheads/first-epss-mcp-server |
More other servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
