Remediation

get_top_affected_systems

Returns the most-referenced affected systems across intelligence reporting, ranked by mention count. Costs 1 credit.

POST
tools/call

Cost: 1 credit per successful call  ·  Response shape: jsonb

Parameters

limitintegeroptionaldefault: 10

Maximum number of systems to return. Accepted range: 1–50.

Example invocation

Ask your agent: "Which systems are most frequently affected according to recent threat intelligence reporting?"

curl -s https://mcp.precursorintelligence.com \
  -H "Authorization: Bearer $PRECURSOR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"get_top_affected_systems","arguments":{"limit":15}}}'

Response

result.content[0].text (parsed)
{
  "count": 15,
  "items": [
    { "system_name": "Microsoft Exchange Server", "blog_count": 412 },
    { "system_name": "Cisco IOS XE",              "blog_count": 318 },
    { "system_name": "Fortinet FortiOS",           "blog_count": 274 },
    { "system_name": "Ivanti Connect Secure",      "blog_count": 209 },
    { "system_name": "Apache HTTP Server",         "blog_count": 187 }
  ],
  "generated_at": "2026-05-18T10:24:31.118Z"
}

Note: the full MCP envelope (including _meta.precursor with request_id, credits, and generated_at) is described in Response Format.

Errors

CodeMessageWhen
-32602invalid_params: limit: min:1limit is less than 1
-32602invalid_params: limit: max:50limit exceeds 50
-32001unauthorizedAPI key is invalid, revoked, or not allowed from this IP
-32002insufficient_creditsCredit balance is zero; top up from the dashboard

For the complete error reference, see Errors.