io.github.cyanheads/cisa-cybersecurity-mcp-server

up checked 2026-11-11T09:39:56.047Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided description

CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.

Summary by lookupd

Lets agents check CVEs against CISA's exploited-vulnerability catalog, search ICS advisories, and retrieve SSVC prioritization data.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http cisa-cybersecurity-mcp-server https://cisa-cybersecurity.caseyjhand.com/mcp

Claude Code, npm package (stdio)

claude mcp add cisa-cybersecurity-mcp-server -- npx -y @cyanheads/cisa-cybersecurity-mcp-server

Claude Code, npm package (stdio)

claude mcp add cisa-cybersecurity-mcp-server -- npx -y @cyanheads/cisa-cybersecurity-mcp-server

Codex, remote (streamable-http)

codex mcp add cisa-cybersecurity-mcp-server --url https://cisa-cybersecurity.caseyjhand.com/mcp

Codex, npm package (stdio)

codex mcp add cisa-cybersecurity-mcp-server -- npx -y @cyanheads/cisa-cybersecurity-mcp-server

Codex, npm package (stdio)

codex mcp add cisa-cybersecurity-mcp-server -- npx -y @cyanheads/cisa-cybersecurity-mcp-server

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "cisa-cybersecurity-mcp-server": {
      "url": "https://cisa-cybersecurity.caseyjhand.com/mcp"
    }
  }
}

Cursor, npm package (stdio) → .cursor/mcp.json

{
  "mcpServers": {
    "cisa-cybersecurity-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/cisa-cybersecurity-mcp-server"
      ]
    }
  }
}

Cursor, npm package (stdio) → .cursor/mcp.json

{
  "mcpServers": {
    "cisa-cybersecurity-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/cisa-cybersecurity-mcp-server"
      ]
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (7 tools)

Publisher-provided text

cisa_list_reference Decode the vocabulary the other CISA tools take as input. Topics cover the BOD 26-04 remediation timeline table and what each tier means, the KEV record fields
cisa_check_cve_status Check CVE IDs against the CISA Known Exploited Vulnerabilities catalog — up to 200 per call, served from a cached catalog snapshot at no upstream cost. Returns,
cisa_search_kev Search the CISA Known Exploited Vulnerabilities catalog across every entry in the cached snapshot. Filter by vendor or product using CISA's own labels, by name
cisa_get_ssvc Fetch the SSVC decision points CISA publishes per CVE as a CVE Authorized Data Publisher — Exploitation, Automatable, and Technical Impact — along with the CVSS
cisa_search_ics_advisories Search the CISA industrial control system advisory corpus — every CSAF 2.0 advisory covering PLC, HMI, SCADA, building-automation, and medical-device products f
cisa_get_advisory Read one CISA industrial control system advisory: product definitions and relationship component references; per-CVE CVSS score, vector, and CWE; vendor remedia
cisa_get_alerts List what CISA has published recently — its combined advisory feed, its alerts feed, or its ICS advisory feed. Cursors continue within the current 30-item rolli

Changes

Newest first, as lookupd saw them

2026-11-11: version 0.4.0 → 0.4.1

Details

Version: 0.4.1
Transports: streamable-http, stdio
Uptime (7 days): 100%
Median latency: 741 ms
First indexed: 2026-11-01T09:25:52.773Z
Last seen in registry: 2026-11-11T13:17:24.080Z
Repository: https://github.com/cyanheads/cisa-cybersecurity-mcp-server

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/io.github.cyanheads/cisa-cybersecurity-mcp-server.svg)](https://lookupd.com/servers/io.github.cyanheads/cisa-cybersecurity-mcp-server)

62033 servers
Last crawl: 2026-11-11T15:38:39.561Z
API base: https://api.lookupd.com
MCP URL: https://api.lookupd.com/mcp