FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

• Connection: Runs in the cloud
• Transport: Streamable HTTP
• Category: Other

Install

Pick the AI app you use, then copy the settings.

You need

• Runs in the cloudNothing to install; it connects over the internet

Which app do you use?

https://ceadigital.io/mcp/epss

claude mcp add --transport http epss-cve-exploit-score https://ceadigital.io/mcp/epss

{
  "mcpServers": {
    "epss-cve-exploit-score": {
      "url": "https://ceadigital.io/mcp/epss"
    }
  }
}

{
  "servers": {
    "epss-cve-exploit-score": {
      "type": "http",
      "url": "https://ceadigital.io/mcp/epss"
    }
  }
}

https://ceadigital.io/mcp/epss

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Tool names and descriptions exactly as the server reported them on Nov 6, 2026. The maker wrote them, not us; we show them as plain text.

• gcp_catalog_search

  Sub-millisecond FTS5 search across 17,671 Google Cloud, Vertex AI, and A2A service records.

• vault_knowledge_search

  FTS5 search across 36,628 video transcript chunks and 106,308 knowledge graph triples in vault.db.

• sec_edgar_cik_lookup

  SEC EDGAR company submission facts, quarterly filings, and CIK lookup under Lowe v. SEC Publisher's Exclusion.

• github_repo_pulse

  Extract repository activity pulse (stars, forks, open issues, license, last push) with ETag caching.

• security_cve_audit

  Audit package vulnerabilities and CVE advisories via OSV.dev database.

• package_health_pulse

  Parallel health pulse inspection across NPM and PyPI ecosystems.

• fdic_bank_health

  Factual public supervisory bank health and branch metrics compiled from FDIC under 12 CFR Part 328.

• openalex_citation_graph

  Academic citation graph metadata and scholarly network metrics from OpenAlex (CC0).

• usgs_seismic_hazard

  Seismic activity and earthquake risk profiles from USGS GeoJSON services.

• dexscreener_token_audit

  Real-time DEX liquidity, price, pair volume, and market cap analytics via DexScreener.

• npi_medical_registry

  CMS NPPES NPI Registry lookup for healthcare organizations and facilities (NPI-2 only, HIPAA safe harbor).

• crtsh_cert_recon

  Query Sectigo Certificate Transparency logs (crt.sh) for issued SSL/TLS certificates and subdomains.

• epss_exploit_score

  Query FIRST.org Exploit Prediction Scoring System (EPSS) for 30-day real-world exploit probability.

• gleif_lei_kyb

  Query Global Legal Entity Identifier Foundation (GLEIF) registry for corporate KYB and LEI records.

• cfpb_complaints

  Query US Consumer Financial Protection Bureau (CFPB) complaint database (17 U.S.C. § 105 public domain).

• usaspending_awards

  Query USASpending.gov Federal Awards and Contractor Intelligence (17 U.S.C. § 105 public domain).

• depsdev_openssf_scorecard

  Query Google Open Source Insights (deps.dev) and Linux Foundation OpenSSF Security Scorecard (0-10) for any GitHub repository or package (#1 in MCP Registry).

• nyfed_sofr_reference_rates

  Query Federal Reserve Bank of New York official Secured Overnight Financing Rate (SOFR) benchmark rates, percentiles, and daily repo volume (#1 in MCP Registry).

• cisa_kev_exploited_vulns

  Query US CISA Known Exploited Vulnerabilities (KEV) Catalog for active in-the-wild exploitation, mandatory federal patch due dates, and ransomware usage.

• corporate_kyb_and_risk_dossier

  5-Source Parallel Composite Dossier: Joins GLEIF LEI + SEC EDGAR + CFPB Complaints + USASpending Federal Awards + FDIC in <400ms with a 0-100 Counterparty Verification Score.

• cyber_supply_chain_security_dossier

  5-Source Parallel Security Dossier: Joins crt.sh SSL Certs + Google deps.dev OpenSSF Scorecard + FIRST.org EPSS + CISA KEV + OSV.dev CVEs in <400ms with a 0-100 Security Posture Score.

• agent_compliance_notary_attest

  Tamper-evident SHA-256 hash-chained Agent Decision & Compliance Notary for EU AI Act, NIST AI RMF, and SOC2 autonomous agent audit trails.

• submit_feedback_or_rate_quote

  Free interactive MCP feedback, feature requests, and custom rate quote negotiation (alias: submit_mcp_feedback_or_request).

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026

• ! Caution

  Maker matches the repo

  The registry lists no source repo, so we cannot match the publisher (ceadigital.io) to the code

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• ✓ Pass

  Endpoint responds

  Responded in 706 ms (HTTP 200)

• – Not applicable

  Sign-in with OAuth

  No sign-in needed

• ✓ Pass

  No hidden instructions in tool descriptions

  Read 23 tool descriptions and found no hidden instructions to the AI

Compared with others in Otheri

• More stars than 0% of the other 32727 servers in this category
• Published to the registry more recently than 95% of the other 32727 servers in this category
• Basic checks equal to or better than 37% of the other 32727 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

README from the maker

No README found in the repo