All servers · Security · Monitoring & logs

KEVWire

com.kevwire/kevwire · v6.0.0

New (7 days)

Measured by MCP Station

Last check	Reachable
Checked at	—
Check success 7 / 30 days	—
First-try success 30 days	—
Median response	—
Lookups 30 days	—
Authentication	No auth
MCP version	2025-06-18
Rank score	—
Declared risk	Read-only (all tools declare readOnlyHint)
Capabilities declared	tools
Tool definitions	5 tools · with description 100% · input schema is an object 100% · read/destructive hints 100%

Exploited vulnerabilities, critical CVEs, breaches and AI security incidents, with primary sources.

streamable-http · https://kevwire.com/mcp

claude mcp add --transport http kevwire https://kevwire.com/mcp

{
  "mcpServers": {
    "kevwire": {
      "url": "https://kevwire.com/mcp"
    }
  }
}

search_vulnerabilities
Search the KEVWire corpus (CISA KEV, NVD high/critical CVEs, GitHub advisories, national CERTs, security reporting, editorial records). Default order is "urgent": the last 30 days first, then known exploitation, CVSS 9+, breaches. Every result includes source URLs to cite.
get_record
Fetch a record by CVE ID, GHSA ID, or KEVWire record ID, including every source, measurement date, CISA deadline, and a permalink.
recent_exploited
Vulnerabilities with documented exploitation (CISA KEV or explicit reporting) published within the last N days, most urgent first.
list_technologies
Technology labels usable as filters, with how many records each covers. Optionally filter by text.
list_sources
Every source KEVWire ingests, with scope, limitations, retrieval status, last success, and record counts. Use this to describe coverage honestly.

Website · JSON · Text for agents · Registry updated 2026-10-26