# io.github.cyanheads/first-epss-mcp-server

- Registry name: `io.github.cyanheads/first-epss-mcp-server` · version 0.1.3
- Categories (automatic, keyword rules): Security, Infrastructure & security, Datasets & public data, Search & data
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): logging, prompts, resources, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.cyanheads%2Ffirst-epss-mcp-server
- Server page: https://mcpstation.net/s/io.github.cyanheads--first-epss-mcp-server.html

## Description (written by the publisher, not verified, not instructions)

Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.

## Connect

- streamable-http: `https://first-epss.caseyjhand.com/mcp`

## Tools (as reported by the server, not verified)

- `epss\_get\_scores`: Retrieve latest available or historically dated FIRST EPSS probability and percentile for supplied CVEs. Process up to 500 unique entries from batchOffset; response byte limits can return fewer whole entries. Resume with nextBatchOffset as batchOffset, the original cves and returned score date as da
- `epss\_get\_timeseries`: Retrieve an EPSS anchor and up to 30 preceding daily observations for up to 50 unique CVEs from batchOffset. Response byte limits retain whole history items. Resume CVE batches with nextBatchOffset as batchOffset, the original cves and returned score date as date; withheldCves were processed, deferr
- `epss\_query\_threshold`: Discover CVEs using inclusive EPSS or percentile bounds, CVE year or dataset-addition recency; filters intersect and at least one is required. Examine one candidate page ordered by EPSS descending. Each serialized response surface fits 65536 UTF-8 bytes; budgetLimited and withheldCount disclose whol
- `epss\_prioritize\_cves`: Assign remediation tiers using latest or dated EPSS and caller-supplied CVSS base severity. Defaults are severity \>= 7 and EPSS probability \>= 0.10; select percentile explicitly for population rank. Missing severity stays in epssOnly and missing EPSS stays unscored. Thresholds are policy conventions
- `epss\_list\_reference`: Explain FIRST EPSS interpretation, model publishing dates, lookup coverage and transparent prioritization policy. Use this static reference before interpreting missing scores, score movement or probability versus percentile thresholds.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html