CyberMax Data

io.github.shawmena-dotcomPublished by GitHub account shawmena-dotcomv1.0.0Updated Oct 24, 2026

Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.

VerifiedStreamable HTTPWeb executableLocation & LifestyleSecurity & MonitoringData & Analytics

Overview

AI-generated overview

A remote MCP server for free US public-data lookups: ZIP demographics, CISA exploited-vulnerability data, domain rank, county federal spending and vehicle/equIP

What you can do
Look up a US ZIP code for city, state, county, coordinates, time zone and Census demographics such as population, income, home value and rent. Check whether a CVE is in CISA's Known Exploited Vulnerabilities catalog, with EPSS, CVSS, CWE and required action, and list the newest KEV additions. Get link-graph rank for popular websites, with a separate Apify-based service for other domains. Retrieve FY2025 federal contract and grant obligations for a US county. Look up NHTSA vehicle and equipment recalls from the last 12 months, or list the newest recalls with risk and remedy.
When to use it
Useful when an assistant needs quick, free reference data on US places, vulnerability exploitation status, website authority, county-level federal spending or vehicle recalls, without building separate integrations for each source.
Requirements
A remote streamable HTTP endpoint; no packages, environment variables or headers are declared. No authentication is declared. Network access to the endpoint and its upstream data sources is required.
Before you install
The domain_rank tool points other domains to a third-party Apify service, which may involve separate terms or costs. Data comes from public sources (Census, CISA, USAspending, NHTSA, Common Crawl) and may lag or be incomplete; verify before relying on it for decisions.

Installation

In SourceWeft

  1. Open CyberMax Data in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.shawmena-dotcom%2Fcybermax-data/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "cybermax-data": {
      "type": "http",
      "url": "https://data.cybermax-tools.workers.dev/mcp"
    }
  }
}

README

This repository has no README.

Tools

7

zip_lookup

US ZIP code lookup

Look up a US ZIP code: city, state, county, coordinates, time zone and Census ACS 2020-2024 demographics (population, median age, household and per-capita income, median home value, median gross rent, housing units, owner-occupied share).

Parameterszip_coderequired

cve_kev_lookup

CISA KEV check for a CVE

Check whether a CVE is in CISA's Known Exploited Vulnerabilities (KEV) catalog; if so return vendor, product, date added, federal due date, known ransomware use, EPSS probability/percentile, CVSS score/severity/vector, CWE and required action.

Parameterscve_idrequired

latest_kev

Newest CISA KEV entries

List the CVEs most recently added to CISA's Known Exploited Vulnerabilities catalog, newest first, with EPSS, CVSS and due date in the summary.

Parameterslimit

domain_rank

Website link-graph rank

Link-graph rank of a popular website (top 5,000): Common Crawl harmonic-centrality and PageRank rank, hosts crawled, previous-crawl rank, Majestic Million rank and referring subnets. For any other domain use Linkheft on Apify (apify.com/cybermax/domain-authority).

Parametersdomainrequired

county_federal_spending

Federal spending in a US county (FY2025)

FY2025 federal prime contract and grant obligations in a US county (USAspending.gov, place of performance): dollars, per-resident values, population and the county's contract rank in its state.

Parameterscounty_fipsrequired

vehicle_recall

NHTSA recall campaign

Look up an NHTSA vehicle/equipment recall campaign from the last 12 months: manufacturer, component, units affected, do-not-drive and park-outside flags, summary, risk, remedy and affected make/model/year list.

Parameterscampaignrequired

latest_recalls

Newest vehicle recalls

List the newest US vehicle and equipment recalls from NHTSA, newest first, with risk and remedy.

Parameterslimit

Version history

1
  1. v1.0.0LatestSep 25, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.