CPE & Vendors

`get_vendor`

Returns a vendor summary: total CVE count, product count, and a per-product list of associated CVE IDs. Costs 1 credit.

POST

tools/call

Cost: 1 credit per successful call · Response shape: jsonb

Parameters

vendorstringrequired

Vendor name, 1–128 characters. Case-insensitive; normalized server-side.

Example invocation

Ask your agent: "Give me a vendor summary for Microsoft, including product count and CVE breakdown."

curl -s https://mcp.precursorintelligence.com \
  -H "Authorization: Bearer $PRECURSOR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"get_vendor","arguments":{"vendor":"microsoft"}}}'

Response

result.content[0].text (parsed)

{
  "vendor": "microsoft",
  "cve_count": 12438,
  "product_count": 312,
  "products": {
    "windows_server_2022": ["CVE-2024-26169", "CVE-2024-21338"],
    "exchange_server": ["CVE-2024-21410", "CVE-2023-23397"]
  }
}

For vendors with many products the products map can be large. Use get_vendor_product to drill into a specific product.

The full MCP envelope (including _meta.precursor with request ID and credit details) is described in Response Format.

Errors

Code	Message	When
`-32602`	`invalid_params: vendor: required_string`	`vendor` argument is missing
`-32602`	`invalid_params: vendor: length:1..128`	`vendor` exceeds 128 characters or is empty
`-32001`	`unauthorized`	API key is invalid, revoked, or not permitted from this IP
`-32002`	`insufficient_credits`	Credit balance is zero; top up from the dashboard

A well-formed request for a vendor not present in the CPE catalog returns a successful response (credit charged) with { "error": "not_found" } in the payload and the credit is refunded automatically.