MCP server

Epss

io.github.pipeworx-io/epss

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

FIRST.org EPSS (Exploit Prediction Scoring System) MCP.

Website Source

At a glance

Type

MCP server

Publisher

pipeworx.io (verified by the MCP Registry)

Status

Working at last check

Tools

44

Token cost

About 26,713 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http epss https://gateway.pipeworx.io/epss/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.epss]
url = "https://gateway.pipeworx.io/epss/mcp"

Gemini CLI

{"mcpServers":{"epss":{"httpUrl":"https://gateway.pipeworx.io/epss/mcp"}}}

Cursor

{"mcpServers":{"epss":{"url":"https://gateway.pipeworx.io/epss/mcp"}}}

VS Code

{"servers":{"epss":{"type":"http","url":"https://gateway.pipeworx.io/epss/mcp"}}}

Antigravity

agy mcp add epss https://gateway.pipeworx.io/epss/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"epss","server_url":"https://gateway.pipeworx.io/epss/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"epss","server_url":"https://gateway.pipeworx.io/epss/mcp"}

Tools

• get_epss ~208 tokens
  EPSS exploit-probability for one or more CVEs. Returns each CVE's EPSS score (0-1 = probability it will be exploited in the wild in the next 30 days) and percentile (how it ranks vs all CVEs). Use to gauge real-world exploit likelihood and prioritize patching — complements CVSS severity (a high-seve
• top_exploited ~202 tokens
  List the CVEs most likely to be exploited, ranked by EPSS score descending. Answers "which vulnerabilities are most likely to be exploited right now" so you can prioritize patching. EPSS is the probability (0-1) a CVE will be exploited in the wild in the next 30 days; this complements CVSS severity

Browse

• GitHub tools
• GitHub and code hosting
• Security scanning

Related MCP servers

• TensorFeed
  AI news, model pricing, service status, and machine-payable premium tools. AFTA-certified.
• SiteCheck Web Intel
  129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402
• Cognita
  Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.
• LiveDataLink
  294 public-data tools across 60 domains; source freshness varies. Free tier.
• ScorpTech x402 API
  112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups
• Security Intel MCP
  CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
• Kevscope CVE Check
  Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.
• EchelonGraph CVE & Exposure
  CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.pipeworx-io/epss.svg)](https://aptlynx.net/servers/io.github.pipeworx-io/epss)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents