list_kev_recent
Returns CISA KEV catalog entries added within the last N days, so you can track recently disclosed exploited vulnerabilities. Costs 1 credit.
tools/callCost: 1 credit per successful call · Response shape: jsonb
Parameters
daysintegeroptionaldefault: 30Look-back window in days. Accepted range: 1–365.
limitintegeroptionaldefault: 50Maximum number of entries to return. Accepted range: 1–200.
Example invocation
Ask your agent: "Show me everything added to CISA KEV in the last 14 days."
curl -s https://mcp.precursorintelligence.com \
-H "Authorization: Bearer $PRECURSOR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_kev_recent","arguments":{"days":14,"limit":100}}}'Response
{
"count": 3,
"days": 14,
"limit": 100,
"items": [
{
"cve_id": "CVE-2024-3094",
"vendor": "XZ Utils",
"product": "xz-utils",
"vulnerability_name": "XZ Utils Supply Chain Compromise",
"date_added": "2026-05-16",
"due_date": "2026-06-06",
"required_action": "Apply mitigations per vendor instructions or discontinue use if mitigations are unavailable.",
"short_description": "XZ Utils contains a supply chain compromise vulnerability affecting liblzma."
},
{
"cve_id": "CVE-2024-21762",
"vendor": "Fortinet",
"product": "FortiOS",
"vulnerability_name": "Fortinet FortiOS Out-of-Bound Write Vulnerability",
"date_added": "2026-05-14",
"due_date": "2026-06-04",
"required_action": "Apply mitigations per vendor instructions or discontinue use if mitigations are unavailable.",
"short_description": "Fortinet FortiOS contains an out-of-bounds write vulnerability that allows a remote unauthenticated attacker to execute arbitrary code."
},
{
"cve_id": "CVE-2024-27198",
"vendor": "JetBrains",
"product": "TeamCity",
"vulnerability_name": "JetBrains TeamCity Authentication Bypass Vulnerability",
"date_added": "2026-05-12",
"due_date": "2026-06-02",
"required_action": "Apply mitigations per vendor instructions or discontinue use if mitigations are unavailable.",
"short_description": "JetBrains TeamCity contains an authentication bypass vulnerability allowing unauthenticated attackers to gain administrative control."
}
],
"generated_at": "2026-05-29T08:15:00.000Z"
}The full MCP envelope, including _meta.precursor with request_id, credits, and response_truncated, is documented in Response Format.
Response fields
countintegeroptionalNumber of entries returned (equals items.length).
daysintegeroptionalThe look-back window used for this request, in days.
limitintegeroptionalThe maximum number of entries requested.
itemsarrayoptionalKEV entries added within the window. Each object contains the fields below.
items[].cve_idstringoptionalCVE identifier for the vulnerability.
items[].vendorstringoptionalVendor or project name as recorded in the CISA KEV catalog.
items[].productstringoptionalAffected product name.
items[].vulnerability_namestringoptionalHuman-readable vulnerability name from the KEV catalog.
items[].date_addedstringoptionalISO 8601 date the entry was added to the KEV catalog (e.g. 2026-05-16).
items[].due_datestringoptionalFederal agency remediation due date from CISA.
items[].required_actionstringoptionalRemediation action prescribed by CISA.
items[].short_descriptionstringoptionalBrief description of the vulnerability.
generated_atstringoptionalISO 8601 timestamp indicating when this response was generated.
Errors
| Code | Message | When |
|---|---|---|
-32602 | invalid_params: days: min:1 | days is less than 1 |
-32602 | invalid_params: days: max:365 | days exceeds 365 |
-32602 | invalid_params: limit: min:1 | limit is less than 1 |
-32602 | invalid_params: limit: max:200 | limit exceeds 200 |
-32001 | unauthorized | API key is invalid or revoked |
-32002 | insufficient_credits | Your credit balance is zero; top up from the dashboard |
-32603 | internal | Unexpected server error; the credit is automatically refunded |