CVE & EPSS

list_kev_recent

Returns CISA KEV catalog entries added within the last N days, so you can track recently disclosed exploited vulnerabilities. Costs 1 credit.

POST
tools/call

Cost: 1 credit per successful call  ·  Response shape: jsonb

Parameters

daysintegeroptionaldefault: 30

Look-back window in days. Accepted range: 1–365.

limitintegeroptionaldefault: 50

Maximum number of entries to return. Accepted range: 1–200.

Example invocation

Ask your agent: "Show me everything added to CISA KEV in the last 14 days."

curl -s https://mcp.precursorintelligence.com \
  -H "Authorization: Bearer $PRECURSOR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_kev_recent","arguments":{"days":14,"limit":100}}}'

Response

result.content[0].text (parsed)
{
  "count": 3,
  "days": 14,
  "limit": 100,
  "items": [
    {
      "cve_id": "CVE-2024-3094",
      "vendor": "XZ Utils",
      "product": "xz-utils",
      "vulnerability_name": "XZ Utils Supply Chain Compromise",
      "date_added": "2026-05-16",
      "due_date": "2026-06-06",
      "required_action": "Apply mitigations per vendor instructions or discontinue use if mitigations are unavailable.",
      "short_description": "XZ Utils contains a supply chain compromise vulnerability affecting liblzma."
    },
    {
      "cve_id": "CVE-2024-21762",
      "vendor": "Fortinet",
      "product": "FortiOS",
      "vulnerability_name": "Fortinet FortiOS Out-of-Bound Write Vulnerability",
      "date_added": "2026-05-14",
      "due_date": "2026-06-04",
      "required_action": "Apply mitigations per vendor instructions or discontinue use if mitigations are unavailable.",
      "short_description": "Fortinet FortiOS contains an out-of-bounds write vulnerability that allows a remote unauthenticated attacker to execute arbitrary code."
    },
    {
      "cve_id": "CVE-2024-27198",
      "vendor": "JetBrains",
      "product": "TeamCity",
      "vulnerability_name": "JetBrains TeamCity Authentication Bypass Vulnerability",
      "date_added": "2026-05-12",
      "due_date": "2026-06-02",
      "required_action": "Apply mitigations per vendor instructions or discontinue use if mitigations are unavailable.",
      "short_description": "JetBrains TeamCity contains an authentication bypass vulnerability allowing unauthenticated attackers to gain administrative control."
    }
  ],
  "generated_at": "2026-05-29T08:15:00.000Z"
}

The full MCP envelope, including _meta.precursor with request_id, credits, and response_truncated, is documented in Response Format.

Response fields

countintegeroptional

Number of entries returned (equals items.length).

daysintegeroptional

The look-back window used for this request, in days.

limitintegeroptional

The maximum number of entries requested.

itemsarrayoptional

KEV entries added within the window. Each object contains the fields below.

items[].cve_idstringoptional

CVE identifier for the vulnerability.

items[].vendorstringoptional

Vendor or project name as recorded in the CISA KEV catalog.

items[].productstringoptional

Affected product name.

items[].vulnerability_namestringoptional

Human-readable vulnerability name from the KEV catalog.

items[].date_addedstringoptional

ISO 8601 date the entry was added to the KEV catalog (e.g. 2026-05-16).

items[].due_datestringoptional

Federal agency remediation due date from CISA.

items[].required_actionstringoptional

Remediation action prescribed by CISA.

items[].short_descriptionstringoptional

Brief description of the vulnerability.

generated_atstringoptional

ISO 8601 timestamp indicating when this response was generated.

Errors

CodeMessageWhen
-32602invalid_params: days: min:1days is less than 1
-32602invalid_params: days: max:365days exceeds 365
-32602invalid_params: limit: min:1limit is less than 1
-32602invalid_params: limit: max:200limit exceeds 200
-32001unauthorizedAPI key is invalid or revoked
-32002insufficient_creditsYour credit balance is zero; top up from the dashboard
-32603internalUnexpected server error; the credit is automatically refunded