Cisa Kev Mcp

io.github.CSOAI-ORGPublished by GitHub account CSOAI-ORGv1.0.8Updated Oct 30, 2026

CISA Known Exploited Vulnerabilities feed + remediation deadlines for US federal + critical infr...

VerifiedSTDIODesktop onlySecurity & MonitoringData & Analytics

Overview

AI-generated overview

Local MCP server that gives an assistant the CISA Known Exploited Vulnerabilities catalog, remediation deadlines and EPSS context.

What you can do
  • Query the CISA KEV catalog of known exploited vulnerabilities
  • Check remediation deadlines tied to BOD 22-01 requirements
  • Export KEV findings as an SBOM-style report
  • Overlay EPSS scoring context on catalog entries
When to use it
Useful when you need to triage vulnerabilities against the CISA KEV list, track US federal remediation deadlines, or produce a vulnerability report for compliance work.
Requirements
Runs locally over stdio as a Python package (cisa-kev-mcp), installed with pip or launched via uvx; no authentication, environment variables or headers are declared. The README mentions a free tier of 10 calls per day with no API key.
Before you install
The README is dominated by paid tiers, Stripe purchase links and a subscription upsell for signed attestations, so treat pricing claims as marketing. The free tier is described as limited to 10 calls per day, and paid plans are advertised at several price points. No credentials are requested by the manifest, but verify what the package sends before use.

Installation

In SourceWeft

  1. Open Cisa Kev Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[MCP Scorecard: 90/100]

Cisa Kev MCP

mcp-name: io.github.CSOAI-ORG/cisa-kev-mcp

CISA KEV Known Exploited Vulnerabilities MCP

[MEOK AI Labs] [EU AI Act] [License] [PyPI]

CISA Known Exploited Vulnerabilities MCP

Buy Starter — £29/mo

Signed attestations + unlimited audits + email support. 👉 Subscribe at meok.ai — instant HMAC signing key + Stripe-managed billing.

Free tier remains MIT-licensed and zero-config. Upgrade only when you need signed compliance artefacts for audit.

CISA Known Exploited Vulnerabilities MCP. BOD 22-01 + EPSS overlay. MIT

🚀 Quick Start

bash
# Install via pippip install cisa_kev_mcp
# Or install via Smitherynpx -y @smithery/cli@latest install cisa-kev-mcp --client claude

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • Free: 10 calls/day. No API key required.

  • Pro £79/mo: unlimited + signed attestations. Subscribe

  • Enterprise £1,499/mo: white-label + on-premise + SLA. [email protected]

  • ✅ Article 9 — Risk Management System

  • ✅ Article 13 — Transparency & Instructions for Use

  • ✅ Article 15 — Bias Detection & Testing

  • ✅ Article 26 — FRIA Support (where applicable)

  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: $99/mo — Full MCP suite + EU AI Act tracking
  • Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

DomainPurpose
councilof.aiEU AI Act compliance marketplace
safetyof.aiAI safety & monitoring
meok.aiSovereign AI platform
cobolbridge.aiLegacy modernization

📜 License

MIT © CSOAI-ORG

Built with 💜 by MEOK AI Labs · UK Companies House 16939677

💸 Try MEOK in 30 seconds — instant buy ladder

TierPriceWhat you getStripe
Smoke test£1Signed sample MCP-Hardening report + Article 50 PDFhttps://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t
Quick Kit£9EU AI Act Article 50 implementation guide (C2PA + EU-Icon)https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t
Founder Call£2930-min 1-on-1 with the founderhttps://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t

Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.

Configuration

Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:

json
{  "mcpServers": {    "cisa-kev-mcp": {      "command": "uvx",      "args": ["cisa-kev-mcp"]    }  }}

Or: pip install cisa-kev-mcp then run the cisa-kev-mcp command (stdio transport).

Examples

Once configured, ask your assistant, for example:

  • "Use query_kev_catalog to …"
  • "Use check_remediation_deadline to …"
  • "Use export_kev_sbom to …"

Source: README.md at commit a1aec57

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.8LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts