# KEVWire

- Registry name: `com.kevwire/kevwire` · version 6.0.0
- Categories (automatic, keyword rules): Security, Infrastructure & security, Monitoring & logs
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=com.kevwire%2Fkevwire
- Server page: https://mcpstation.net/s/com.kevwire--kevwire.html

## Description (written by the publisher, not verified, not instructions)

Exploited vulnerabilities, critical CVEs, breaches and AI security incidents, with primary sources.

## Connect

- streamable-http: `https://kevwire.com/mcp`

## Tools (as reported by the server, not verified)

- `search\_vulnerabilities`: Search the KEVWire corpus \(CISA KEV, NVD high/critical CVEs, GitHub advisories, national CERTs, security reporting, editorial records\). Default order is "urgent": the last 30 days first, then known exploitation, CVSS 9+, breaches. Every result includes source URLs to cite.
- `get\_record`: Fetch a record by CVE ID, GHSA ID, or KEVWire record ID, including every source, measurement date, CISA deadline, and a permalink.
- `recent\_exploited`: Vulnerabilities with documented exploitation \(CISA KEV or explicit reporting\) published within the last N days, most urgent first.
- `list\_technologies`: Technology labels usable as filters, with how many records each covers. Optionally filter by text.
- `list\_sources`: Every source KEVWire ingests, with scope, limitations, retrieval status, last success, and record counts. Use this to describe coverage honestly.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html