Federal Financial Intel

io.github.martc03Published by GitHub account martc03v1.0.0Updated Oct 24, 2026

SEC EDGAR, CFPB complaints, and BLS employment data. 4 tools.

VerifiedStreamable HTTPWeb executableSecurity & MonitoringData & Analytics

Overview

AI-generated overview

A remote MCP server for cybersecurity vulnerability intelligence, letting an assistant look up CVEs with CVSS, KEV, EPSS and ATT&CK data from government sources

What you can do
Look up a single CVE and get NVD details, CVSS score, CISA KEV exploitation status, EPSS probability and ATT&CK techniques in one call. Search CVEs by keyword, severity and date range, optionally limited to actively exploited ones. List recently added KEV entries and KEV entries with remediation deadlines approaching. Rank CVEs by EPSS exploitation probability and list newly published critical CVEs. Assess a vendor or product's CVEs, cross-referenced against KEV.
When to use it
Useful for vulnerability triage, patch prioritization, federal KEV compliance tracking, threat intelligence on trending CVEs, and vendor risk assessment where an assistant should pull public vulnerability data without leaving the conversation.
Requirements
Runs as a hosted remote endpoint over Streamable HTTP; no local runtime or account is declared. The README also documents a local Node.js 18+ stdio option, where an optional NVD_API_KEY environment variable raises NVD rate limits.
Before you install
The README describes a different server (cybersecurity vulnerability intelligence) than the registry description (SEC EDGAR, CFPB, BLS), so confirm which tools the endpoint actually exposes. The optional NVD_API_KEY is a credential; keep it out of shared configs. Data comes from third-party government and FIRST.org sources and is cached with fixed TTLs, so results may lag.

Installation

In SourceWeft

  1. Open Federal Financial Intel in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.martc03%2Ffederal-financial-intel/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "federal-financial-intel": {
      "type": "http",
      "url": "https://federal-financial-intel-mcp.apify.actor/mcp"
    }
  }
}

README

Cybersecurity Vulnerability Intelligence MCP Server

Unified vulnerability intelligence from 4 government data sources in a single MCP server. Get enriched CVE lookups with CVSS scores, active exploitation status, exploitation probability, and ATT&CK techniques in one call.

SourceWhat It ProvidesUpdate Frequency
NIST NVD 2.0CVE details, CVSS scores, descriptions, references, CWE classificationsContinuous
CISA KEVActively exploited vulnerabilities catalog, remediation deadlinesDaily
FIRST.org EPSSExploitation probability scores (0-1) predicting likelihood of exploitation in next 30 daysDaily
MITRE ATT&CKAdversary techniques mapped to CVEsQuarterly

Tools

vuln_lookup_cve — Enriched CVE Lookup

The killer feature. Look up any CVE and get intelligence from all 4 sources in a single call.

  • Input: { cveId: "CVE-2021-44228" }
  • Returns: NVD details + CVSS score + KEV exploitation status + EPSS probability + ATT&CK techniques

vuln_search — Search CVEs

Search the NVD by keyword, severity, and date range. Optionally filter to only actively exploited (KEV) vulnerabilities.

  • Input: { keyword: "apache log4j", severity: "CRITICAL", hasKev: true, limit: 20 }

vuln_kev_latest — Recently Exploited Vulnerabilities

Get vulnerabilities recently added to CISA's Known Exploited Vulnerabilities catalog.

  • Input: { days: 7, limit: 20 }

vuln_kev_due_soon — Upcoming Remediation Deadlines

Get KEV entries with remediation deadlines approaching. Critical for federal compliance.

  • Input: { days: 14, limit: 20 }

vuln_epss_top — Highest Exploitation Probability

Get CVEs most likely to be exploited in the next 30 days based on EPSS machine learning model.

  • Input: { threshold: 0.7, limit: 20 }

vuln_trending — Newly Published Critical CVEs

Get recently published high/critical severity CVEs from the NVD.

  • Input: { days: 3, severity: "CRITICAL", limit: 20 }

vuln_by_vendor — Vendor Vulnerability Assessment

Search CVEs for a specific vendor/product. Cross-references with CISA KEV to flag actively exploited issues.

  • Input: { vendor: "microsoft", product: "windows", limit: 20 }

Use Cases

  • Vulnerability triage: Look up a CVE and instantly know if it's actively exploited, its EPSS score, and what ATT&CK techniques apply
  • Patch prioritization: Combine KEV status + EPSS scores to prioritize remediation
  • Compliance tracking: Monitor upcoming CISA KEV remediation deadlines
  • Threat intelligence: Track trending CVEs and newly weaponized vulnerabilities
  • Vendor risk assessment: Assess a vendor's vulnerability exposure and active exploitation status

Quick Start

Glama (hosted)

Install from Glama.ai.

Apify (hosted)

json
{  "mcpServers": {    "cybersecurity": {      "url": "https://cybersecurity-vuln-mcp.apify.actor/mcp"    }  }}

Claude Desktop / Claude Code

json
{  "mcpServers": {    "cybersecurity": {      "command": "node",      "args": ["path/to/servers/cybersecurity-vuln-mcp/dist/stdio.js"],      "env": {        "NVD_API_KEY": "your-key-here"      }    }  }}

Local (stdio)

bash
git clone https://github.com/martc03/gov-mcp-servers.gitcd gov-mcp-servers/servers/cybersecurity-vuln-mcpnpm install && npm run buildnode dist/stdio.js

Environment Variables

VariableRequiredDescription
NVD_API_KEYNoNVD API key for higher rate limits (50 req/30s vs 5 req/30s). Register here.

Caching

Data SourceTTLNotes
NVD CVE lookups1 hourPer-CVE
CISA KEV catalog2 hoursFull catalog
EPSS scores24 hoursPer-CVE
ATT&CK mappingsStaticBundled with server

Architecture

  • Protocol: MCP over stdio (Glama/local) or Streamable HTTP (Apify)
  • Runtime: Node.js 18+, TypeScript
  • Data: Direct API calls to free government data sources, zero cost
  • Caching: In-memory with configurable TTLs

Other Servers in This Repo

This repository contains 13 MCP servers for US government data. See each server's README for details.

ServerToolsData Sources
us-safety-recalls-mcp4NHTSA recalls, FDA recalls
natural-disaster-intel-mcp4FEMA disasters, NOAA weather, USGS earthquakes
federal-financial-intel-mcp4SEC EDGAR, CFPB complaints, BLS employment
immigration-travel-mcp3Visa bulletins, border wait times
environmental-compliance-mcp3EPA air quality, HUD foreclosures
gov-contracts-mcp4SAM.gov contracts, USAspending
court-records-mcp4PACER, federal court records
public-health-mcp4NIH clinical trials, FDA adverse events
business-entity-mcp4SEC company search, SBA resources
regulatory-monitor-mcp4Federal Register, regulations.gov
grant-finder-mcp4Grants.gov, USAspending
competitive-intel-mcp4SEC filings, patent data, trade data

A REST API gateway with 45 endpoints is also available at govdata-api.netlify.app.

Attribution

  • NVD: This product uses data from the NVD API but is not endorsed or certified by the NVD.
  • EPSS: Data provided by FIRST.org (https://www.first.org/epss/).
  • ATT&CK: Registered trademark of The MITRE Corporation. Licensed under Apache 2.0.
  • KEV: CISA Known Exploited Vulnerabilities Catalog, US Government public domain.

Custom MCP Server Development

Need a custom MCP server for your business? Visit mcpdev.netlify.app or email [email protected].

License

MIT

Source: README.md at commit 26427e2

Tools

0
SourceWeft has not read this server's tools yet.

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts