# Stack Facts

- Registry name: `us.srv.g5joilnmeep4ntz3nwezxt5dmu/stackfacts` · version 0.5.0
- Categories (automatic, keyword rules): AI models & agents, AI, media & content, Security, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=us.srv.g5joilnmeep4ntz3nwezxt5dmu%2Fstackfacts
- Server page: https://mcpstation.net/s/us.srv.g5joilnmeep4ntz3nwezxt5dmu--stackfacts.html

## Description (written by the publisher, not verified, not instructions)

Signed EOL dates, exploited CVEs and LLM prices; pay per call in USDC, no account, no daily cap.

## Connect

- streamable-http: `https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp`

## Tools (as reported by the server, not verified)

- `stackfacts\_eol\_product`: List every release cycle of a product \(Node.js, Python, Ubuntu…\) and if it is still supported: EOL \(end-of-life\) date, support status, LTS, latest version.
- `stackfacts\_eol\_cycle`: Check if a version is still supported \(is python 3.12 still supported?\): one release cycle, its EOL \(end-of-life\) date, support status, LTS, latest patch.
- `stackfacts\_eol\_check`: Check runtimes and OS versions for EOL: is each still supported? Up to 50 product@version pairs, end-of-life date, support status; unknowns get suggestions.
- `stackfacts\_eol\_image`: Check a container image for EOL: is node:18-alpine still supported? Maps its runtime, Java and base OS to end-of-life date and support status.
- `stackfacts\_eol\_snapshot`: Download the signed EOL \(end-of-life\) snapshot \(endoflife.date, MIT\): support status of every product and cycle, still supported or not, plus its manifest.
- `stackfacts\_kev\_lookup`: Check if a CVE is actively exploited \(CISA KEV\): in\_kev, date added, remediation due date, required action and known ransomware use.
- `stackfacts\_kev\_check`: Check up to 100 CVEs at once against CISA KEV \(known exploited vulnerabilities\); returns in\_kev and the KEV details for each one.
- `stackfacts\_kev\_changes`: List CVEs added to, removed from or changed in CISA KEV since a snapshot\_id, so an agent can poll for newly exploited vulnerabilities.
- `stackfacts\_kev\_snapshot`: Download the full signed CISA KEV snapshot: every known exploited vulnerability, with a manifest to verify the sha256 and signature.
- `stackfacts\_models\_lookup`: Get an LLM model's price per million tokens \(input, output, cached\), context window, max output, capabilities and model deprecation date.
- `stackfacts\_models\_estimate`: Estimate the USD cost of an LLM call from input, output and cached token counts, exact to the micro-dollar, with the price lines used.
- `stackfacts\_models\_cheapest`: Find the cheapest model with tools and 128k context, or any limits you set: ranks the 10 cheapest LLMs by blended price per million tokens.
- `stackfacts\_models\_changes`: List LLM models added, removed or changed \(price per million tokens, context window, model deprecation date\) since a snapshot\_id.
- `stackfacts\_models\_watch`: Check LLMs for what changed since your last call: changed records \(with today's price and limits\), removals, deprecated or soon deprecated, with snapshot dates.
- `stackfacts\_models\_snapshot`: Download the full signed LLM model catalogue \(LiteLLM + models.dev, MIT\): prices, limits and capabilities, with a verifiable manifest.
- `stackfacts\_stack\_check`: Check dependencies, runtimes and OS versions in one call: OSV for up to 50 purls, EOL for 50 product@version pairs, CISA KEV hits, suggestions for unknowns.
- `stackfacts\_osv\_check`: Check dependencies or a lockfile for vulnerable and malicious packages: up to 50 purls, or a package-lock, yarn.lock, requirements.txt or poetry.lock, on OSV.
- `stackfacts\_preflight`: Call before installing a package an LLM suggested: one npm, PyPI or purl version against OSV, CISA KEV and EOL data. Returns ok, warn or block with reasons.
- `stackfacts\_cve\_lookup`: Get any CVE: CISA KEV entry, CVSS score and patch priority, plus every OSV advisory aliased to it, with affected packages and fixed versions.
- `stackfacts\_cwe\_lookup`: Get one MITRE CWE weakness by id \(79 or CWE-79\): name, status, description and MITRE link. From the CWE catalogue \(v4.20\); MITRE notice on every answer.
- `stackfacts\_technique\_lookup`: Get one technique by id \(T1055.011\): name, tactics, platforms, description, mitigations, detection, data sources and link. MITRE ATT&CK v20.0; credited.
- `stackfacts\_capec\_lookup`: Get one MITRE CAPEC attack pattern by id: severity, likelihood, prerequisites, mitigations, related CWE and ATT&CK ids and MITRE link.
- `stackfacts\_domain\_lookup`: Get the public suffix, registrable domain and subdomain of a host name from the Mozilla Public Suffix List, with the matching rule and section.
- `stackfacts\_port\_lookup`: Get the IANA service name, transport, description and reference for a port number from the IANA Service Name and Transport Protocol Port Number Registry.
- `stackfacts\_control\_lookup`: Get one NIST SP 800-53 Rev 5 security control or enhancement by id \(AC-2, AC-2\(1\)\): title, statement, guidance, related controls and status.
- `stackfacts\_bcp47\_lookup`: Get an IANA language tag \(en-AU, zh-Hant\) part by part: type, description, scope, deprecation and preferred value from the Language Subtag Registry.
- `stackfacts\_tz\_lookup`: Get an IANA time zone \(Europe/Berlin\) or alias: current UTC offset, abbreviation, DST summary and backward-compatible names from tzdata.
- `stackfacts\_package\_card`: Get an npm or PyPI package's latest version, publish dates, deprecation or yank, SPDX licence, repository and runtime range.
- `stackfacts\_license\_check`: Call before adding a dependency: check SPDX licences or packages against your project licence and use, with a compatibility verdict per item.
- `stackfacts\_cve\_prioritize`: Call before patching: rank up to 100 CVEs by CISA KEV status, then CVSS base score.
- `stackfacts\_cve\_search`: Find CVEs by keyword or package name in CISA KEV and OSV \(not all of NVD\), with KEV status and CVSS v3 where an OSV advisory has one.
- `stackfacts\_package\_preflight`: Call before installing an npm or PyPI package: latest or given version, licence, OSV vulns, CISA KEV CVEs, deprecation or yank. Returns ok, caution or block.
- `stackfacts\_upgrade\_delta`: Check moving an npm or PyPI package from one version to another: advisories fixed or introduced, KEV, licence, runtime. Returns go, review or no\_go.
- `stackfacts\_lockfile\_diff`: Check npm or PyPI purl lists or raw lockfiles: upgrades judged on advisories, KEV, licence; same version, other hash = hash\_mismatch. Returns go, review, no\_go.
- `stackfacts\_stack\_watch`: Check dependencies, runtimes and OS versions for what changed since your last call: EOL passed or near, new OSV advisories, new CISA KEV hits. Returns a token.
- `stackfacts\_preview`: Preview a dataset for free: sample end-of-life products, newest CISA KEV entries, LLM prices, a package card or a licence verdict.
- `stackfacts\_try`: Try a paid answer for free on a fixed example: nodejs end-of-life cycles, CVE-2021-44228 in CISA KEV, or openai/gpt-4o prices.
- `stackfacts\_index`: List the valid ids for free: end-of-life product names and aliases, or LLM provider/model ids, so a paid call never misses.
- `stackfacts\_validate`: Validate an id for free. Privacy: only an unknown EOL id is logged \(access log, miss field\); a 400 logs the input name, never its value. No other id is stored.
- `stackfacts\_manifest`: Get the signed manifest of a dataset's latest snapshot for free: snapshot\_id, sha256, record count, source, licence and signature.
- `stackfacts\_keys`: Get the Ed25519 public keys \(JWK\) that verify the signature on every answer and snapshot manifest.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html