io.threatist/threatist

up checked 2026-11-12T04:40:05.430Z

Unclaimed · Unverified

Publisher-provided title

Threatist

Publisher-provided description

Vulnerability records: CVE, GHSA, CISA KEV, EPSS and vendor fixes in one place. No key needed.

Summary by lookupd

Look up CVE, GHSA and CISA KEV vulnerability records, EPSS scores and vendor fixes, and search them by text and filters.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http threatist https://threatist.io/mcp

Codex, remote (streamable-http)

codex mcp add threatist --url https://threatist.io/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "threatist": {
      "url": "https://threatist.io/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Publisher-provided text

get_advisory A Red Hat RHSA or Microsoft KB or ADV with its CVEs and records.
get_vendor A vendor's records, highest priority first. Takes the same filters as search_vulnerabilities.
get_vulnerability A record for a TI id or an alias such as a CVE or GHSA id. Merged ids give the surviving record. By default the record is shortened: no CPE matches, at most 20
list_exploited Recent additions to CISA's Known Exploited Vulnerabilities catalogue. Newest first, each with its Threatist record.
search_vulnerabilities Records matching a text and filters, a page at a time. Pass next as cursor for the next page.

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/io.threatist/threatist.svg)](https://lookupd.com/servers/io.threatist/threatist)