About cisa-kev-mcp
cisa-kev-mcp provides access to the CISA Known Exploited Vulnerabilities catalog, with BOD 22-01 and EPSS overlays. It is for teams tracking exploited vulnerabilities and remediation deadlines.
Key features
- 01Query the KEV catalog
- 02Check remediation deadlines
- 03Export KEV SBOM
- 04BOD 22-01 and EPSS overlays
Use cases
- 01Review known exploited vulnerabilities
- 02Track remediation deadlines
- 03Export vulnerability data for an SBOM
MCP support
Exposes tools to query the KEV catalog, check remediation deadlines, and export KEV SBOM data to MCP clients.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project READMECisa Kev MCP
mcp-name: io.github.CSOAI-ORG/cisa-kev-mcp
CISA KEV Known Exploited Vulnerabilities MCP
CISA Known Exploited Vulnerabilities MCP
Buy Starter — £29/mo
Signed attestations + unlimited audits + email support. 👉 Subscribe at meok.ai — instant HMAC signing key + Stripe-managed billing.
Free tier remains MIT-licensed and zero-config. Upgrade only when you need signed compliance artefacts for audit.
CISA Known Exploited Vulnerabilities MCP. BOD 22-01 + EPSS overlay. MIT
🚀 Quick Start
# Install via pip
pip install cisa_kev_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install cisa-kev-mcp --client claude
✨ Features
- MCP protocol compliant
- Easy installation
- Well-documented API
- Production-ready
- Active maintenance
📖 Documentation
🛡️ Compliance
This MCP server is built with EU AI Act compliance built-in:
-
Free: 10 calls/day. No API key required.
-
Pro £79/mo: unlimited + signed attestations. Subscribe
-
Enterprise £1,499/mo: white-label + on-premise + SLA. [email protected]
-
✅ Article 9 — Risk Management System
-
✅ Article 13 — Transparency & Instructions for Use
-
✅ Article 15 — Bias Detection & Testing
-
✅ Article 26 — FRIA Support (where applicable)
-
✅ Article 50 — AI Content Watermarking (where applicable)
Need help getting compliant? Book a free 15-min diagnostic →
🏢 Enterprise
Need custom development, SLA guarantees, or white-label deployment?
- Pro: $99/mo — Full MCP suite + EU AI Act tracking
- Enterprise: $499/mo — Custom dev + SLA + Dedicated support
View Pricing → | Contact Sales →
🤝 Part of the MEOK Ecosystem
This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.
| Domain | Purpose |
|---|---|
| councilof.ai | EU AI Act compliance marketplace |
| safetyof.ai | AI safety & monitoring |
| meok.ai | Sovereign AI platform |
| cobolbridge.ai | Legacy modernization |
📜 License
MIT © CSOAI-ORG
Built with 💜 by MEOK AI Labs · UK Companies House 16939677
💸 Try MEOK in 30 seconds — instant buy ladder
| Tier | Price | What you get | Stripe |
|---|---|---|---|
| Smoke test | £1 | Signed sample MCP-Hardening report + Article 50 PDF | https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t |
| Quick Kit | £9 | EU AI Act Article 50 implementation guide (C2PA + EU-Icon) | https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t |
| Founder Call | £29 | 30-min 1-on-1 with the founder | https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t |
Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.
Configuration
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
{
"mcpServers": {
"cisa-kev-mcp": {
"command": "uvx",
"args": ["cisa-kev-mcp"]
}
}
}
Or: pip install cisa-kev-mcp then run the cisa-kev-mcp command (stdio transport).
Examples
Once configured, ask your assistant, for example:
- "Use
query_kev_catalogto …" - "Use
check_remediation_deadlineto …" - "Use
export_kev_sbomto …"
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.