MCP server

First Epss

io.github.cyanheads/first-epss-mcp-server

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.

Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Working at last check

Tools

5

Token cost

About 2,478 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http first-epss-mcp-server https://first-epss.caseyjhand.com/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.first-epss-mcp-server]
url = "https://first-epss.caseyjhand.com/mcp"

Gemini CLI

{"mcpServers":{"first-epss-mcp-server":{"httpUrl":"https://first-epss.caseyjhand.com/mcp"}}}

Cursor

{"mcpServers":{"first-epss-mcp-server":{"url":"https://first-epss.caseyjhand.com/mcp"}}}

VS Code

{"servers":{"first-epss-mcp-server":{"type":"http","url":"https://first-epss.caseyjhand.com/mcp"}}}

Antigravity

agy mcp add first-epss-mcp-server https://first-epss.caseyjhand.com/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"first-epss-mcp-server","server_url":"https://first-epss.caseyjhand.com/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"first-epss-mcp-server","server_url":"https://first-epss.caseyjhand.com/mcp"}

Tools

• epss_get_scores ~417 tokens
  Retrieve latest available or historically dated FIRST EPSS probability and percentile for supplied CVEs. Process up to 500 unique entries from batchOffset; response byte limits can return fewer whole entries. Resume with nextBatchOffset as batchOffset, the original cves and returned score date as da
• epss_get_timeseries ~444 tokens
  Retrieve an EPSS anchor and up to 30 preceding daily observations for up to 50 unique CVEs from batchOffset. Response byte limits retain whole history items. Resume CVE batches with nextBatchOffset as batchOffset, the original cves and returned score date as date; withheldCves were processed, deferr
• epss_list_reference ~196 tokens
  Explain FIRST EPSS interpretation, model publishing dates, lookup coverage and transparent prioritization policy. Use this static reference before interpreting missing scores, score movement or probability versus percentile thresholds.
• epss_prioritize_cves ~821 tokens
  Assign remediation tiers using latest or dated EPSS and caller-supplied CVSS base severity. Defaults are severity >= 7 and EPSS probability >= 0.10; select percentile explicitly for population rank. Missing severity stays in epssOnly and missing EPSS stays unscored. Thresholds are policy conventions
• epss_query_threshold ~600 tokens
  Discover CVEs using inclusive EPSS or percentile bounds, CVE year or dataset-addition recency; filters intersect and at least one is required. Examine one candidate page ordered by EPSS descending. Each serialized response surface fits 65536 UTF-8 bytes; budgetLimited and withheldCount disclose whol

Browse

• GitHub tools
• Calendars
• Hiring and jobs
• GitHub and code hosting
• Security scanning

Related MCP servers

• EchelonGraph CVE & Exposure
  CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
• TensorFeed
  AI news, model pricing, service status, and machine-payable premium tools. AFTA-certified.
• Cognita
  Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.
• DataNexus MCP
  Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.
• Security Intel MCP
  CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
• LiveDataLink
  294 public-data tools across 60 domains; source freshness varies. Free tier.
• AIS CVE Priorities — daily exploit-ranked patch list for AI agents
  Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
• ScorpTech x402 API
  112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.cyanheads/first-epss-mcp-server.svg)](https://aptlynx.net/servers/io.github.cyanheads/first-epss-mcp-server)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents