CVE & EPSS

`list_high_epss_cves`

Returns CVEs whose EPSS exploit-probability score meets or exceeds a minimum threshold, sorted by EPSS score descending. Use it to surface the CVEs most likely to be exploited in the wild right now. Costs 1 credit.

POST

tools/call

Cost: 1 credit per successful call · Response shape: jsonb

Parameters

min_epssnumberoptionaldefault: 0.5

Minimum EPSS score. Must be between 0.0 and 1.0 inclusive. Higher values narrow the result to CVEs with the greatest exploitation likelihood.

limitintegeroptionaldefault: 50

Maximum number of CVEs to return. Accepts 1 to 200.

Example invocation

Ask your agent: "Show me the 20 CVEs with the highest EPSS scores above 0.9."

curl -s https://mcp.precursorintelligence.com \
  -H "Authorization: Bearer $PRECURSOR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_high_epss_cves","arguments":{"min_epss":0.9,"limit":20}}}'

Response

result.content[0].text (parsed)

{
  "count": 20,
  "min_epss": 0.9,
  "limit": 20,
  "items": [
    {
      "cve_id": "CVE-2024-3094",
      "epss": 0.97531,
      "percentile": 0.99986,
      "delta": 0.00012,
      "updated_at": "2026-05-28T00:00:00Z"
    },
    {
      "cve_id": "CVE-2021-44228",
      "epss": 0.97527,
      "percentile": 0.99985,
      "delta": -0.00003,
      "updated_at": "2026-05-28T00:00:00Z"
    }
  ],
  "generated_at": "2026-05-29T09:15:44.221Z"
}

The full MCP envelope (including _meta.precursor with request_id, credits, and response_truncated) is described in Response Format.

Errors

Code	Message	When
`-32602`	`invalid_params: min_epss: type`	`min_epss` is not a number
`-32602`	`invalid_params: min_epss: min:0`	`min_epss` is less than 0
`-32602`	`invalid_params: min_epss: max:1`	`min_epss` is greater than 1
`-32602`	`invalid_params: limit: min:1`	`limit` is less than 1
`-32602`	`invalid_params: limit: max:200`	`limit` is greater than 200
`-32001`	`unauthorized`	API key is invalid or revoked
`-32002`	`insufficient_credits`	Credit balance is zero; top up from the dashboard