MCP server

endoflife.ai — Software Lifecycle Intelligence Official

io.github.endoflife-ai/endoflife-mcp

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

EOL dates, risk scores, CISA KEV exposure, SBOM audits and edge-device EOS for 500+ products.

Website Source

At a glance

Type

MCP server

Publisher

endoflife.ai (verified by the MCP Registry)

Status

Working at last check

Tools

10

Token cost

About 2,007 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http endoflife-mcp https://mcp.endoflife.ai

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.endoflife-mcp]
url = "https://mcp.endoflife.ai"

Gemini CLI

{"mcpServers":{"endoflife-mcp":{"httpUrl":"https://mcp.endoflife.ai"}}}

Cursor

{"mcpServers":{"endoflife-mcp":{"url":"https://mcp.endoflife.ai"}}}

VS Code

{"servers":{"endoflife-mcp":{"type":"http","url":"https://mcp.endoflife.ai"}}}

Antigravity

agy mcp add endoflife-mcp https://mcp.endoflife.ai

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"endoflife-mcp","server_url":"https://mcp.endoflife.ai","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"endoflife-mcp","server_url":"https://mcp.endoflife.ai"}

Tools

• check_eol ~201 tokens
  Check whether a specific version of a software product is end-of-life (EOL). Returns lifecycle status, the EOL date, days remaining or days past EOL, the latest release, and eol_date_source (where the date comes from: vendor-override, vendor-fetched, vendor-verified, custom, upstream, or discrepancy
• check_sbom ~240 tokens
  Audit a CycloneDX or SPDX JSON software bill of materials. Components are mapped to tracked products and scored for EOL risk; unmatched components are listed honestly rather than guessed. Pass the SBOM as a JSON string or object. Versions resolve to their release family (python 3.12, php 7.4, ubuntu
• get_edge_device_status ~292 tokens
  Query the EOS Edge Device Intelligence feed — firewalls, VPN gateways and appliances, ADCs, router and switch operating systems — with end-of-support status in the vocabulary of CISA BOD 26-02 (eos, within-12-months, scheduled, no-date-announced). Filter by platform or vendor name, by status, or by
• get_kev_exposure ~234 tokens
  The exploited-vulnerability record for a product: every CVE CISA lists against it in the Known Exploited Vulnerabilities catalog, with the date added, the federal due date and CISA's required-action text verbatim (the "discontinue use" entries are the ones that matter for end-of-life versions), plus
• get_product_lifecycle ~114 tokens
  Get the full version history for one product: every tracked version/cycle with its release date, EOL date, support status, and EOL Risk Score. Use for "give me the whole EOL schedule for X".
• get_risk_score ~182 tokens
  Get the proprietary EOL Risk Score (0-100) for a product version, with the four-factor breakdown (EOL recency, attack surface, CISA KEV exposure, extended support). Omit "version" to score the product's highest-risk (most recently end-of-lifed) release. Use this to quantify how dangerous it is to ke
• get_upcoming_eol ~230 tokens
  What reaches end-of-life soon. Returns every tracked version whose EOL date falls within the next N days (default 90), optionally limited to a list of products, sorted by date. Also lists versions that went EOL within the last "recent_past_days" days when set. Use for "what in our stack expires this
• get_upgrade_path ~158 tokens
  Where to move a product version: the current version's support status and score, the supported releases with the longest remaining support, endoflife.ai's recommended target, and the vendor's stated successor where one is published (edge appliances). Use after check_eol says a version is EOL.
• list_products ~121 tokens
  List or search the 700+ products endoflife.ai tracks. Pass an optional "query" substring to find the canonical slug for a product before calling the other tools (e.g. "postgres" → "postgresql"). Returns matching product slugs.
• scan_stack ~235 tokens
  Audit a whole stack at once. Provide a list of products (optionally with versions) — e.g. parsed from a package.json or Dockerfile — and get an EOL Risk Score for each, so you can see what is unsupported and dangerous in one call. For CycloneDX or SPDX documents use check_sbom instead. Without a key

Browse

• GitHub tools
• GitHub and code hosting
• Databases
• Security scanning

Related MCP servers

• Agent Data Tools
  15 data tools at $0.01 USDC/call on Base via x402. Free discovery; x402 wallet client required.
• Endoflife
  endoflife.date MCP.
• SiteCheck Web Intel
  129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402
• ContrastAPI
  55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
• Sectora
  Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.
• Theaslangroupllc Pulsenetwork
  914 paid market-data & token-safety endpoints — keyless x402 USDC: Base, Solana, XRPL, +8 chains
• Exploitwatch
  Check dependencies against CISA's real Known Exploited Vulnerabilities feed.
• EchelonGraph CVE & Exposure
  CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.endoflife-ai/endoflife-mcp.svg)](https://aptlynx.net/servers/io.github.endoflife-ai/endoflife-mcp)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents