list_my_alerts
List your organisation's CVE alert/notification feed (triggered matches against your watched vendors/products), newest first. Set unseen_only to show only unread. Costs 1 credit.
tools/callCost: 1 credit per successful call · Scope: mcp:org · Response shape: jsonb
Returns data scoped to your own organisation only — the organisation is resolved from your API key and injected server-side, never read from the request.
Parameters
unseen_onlybooleanoptionaldefault: falseWhen true, only return alerts that have not yet been marked as seen.
limitintegeroptionaldefault: 50Maximum number of entries to return. Accepted range: 1–200.
Example invocation
Ask your agent: "Any new CVE alerts for us this week?"
curl -s https://api.precursorintelligence.com/functions/v1/mcp \
-H "Authorization: Bearer $PRECURSOR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_my_alerts","arguments":{"unseen_only":true,"limit":50}}}'Response
{
"count": 2,
"items": [
{
"cve_id": "CVE-2024-3400",
"vulnerability_title": "PAN-OS GlobalProtect Command Injection",
"severity": "CRITICAL",
"cvss_score": 10.0,
"epss_score": 0.9612,
"vendor": "Palo Alto Networks",
"product": "PAN-OS",
"version": "11.1.0",
"match_reason": "product",
"notification_reason": "kev_listed",
"seen": false,
"created_at": "2026-06-17T06:32:00.000Z"
},
{
"cve_id": "CVE-2024-21762",
"vulnerability_title": "Fortinet FortiOS Out-of-Bound Write",
"severity": "CRITICAL",
"cvss_score": 9.8,
"epss_score": 0.9347,
"vendor": "Fortinet",
"product": "FortiOS",
"version": "7.4.2",
"match_reason": "vendor",
"notification_reason": "high_epss",
"seen": false,
"created_at": "2026-06-15T11:04:00.000Z"
}
],
"generated_at": "2026-06-18T08:15:00.000Z"
}The full MCP envelope, including _meta.precursor with request_id, credits, and response_truncated, is documented in Response Format.
Response fields
countintegeroptionalNumber of entries returned (equals items.length).
itemsarrayoptionalAlerts for your organisation, newest first. Each object contains the fields below.
items[].cve_idstringoptionalCVE identifier that triggered the alert.
items[].vulnerability_titlestringoptionalHuman-readable title for the vulnerability.
items[].severitystring | nulloptionalSeverity label, e.g. CRITICAL, HIGH, MEDIUM, LOW.
items[].cvss_scorenumber | nulloptionalCVSS base score (0.0–10.0). null when no CVSS data is present.
items[].epss_scorenumber | nulloptionalEPSS exploit-probability score (0.0–1.0). null when no EPSS data exists.
items[].vendorstringoptionalVendor name that matched your watchlist.
items[].productstringoptionalAffected product name.
items[].versionstring | nulloptionalAffected version that matched, where known.
items[].match_reasonstringoptionalHow the CVE was matched to your watchlist, e.g. vendor, product, or
version.
items[].notification_reasonstringoptionalWhy the alert was raised, e.g. kev_listed, high_epss, new_match.
items[].seenbooleanoptionalWhether the alert has been marked as seen.
items[].created_atstringoptionalISO 8601 timestamp of when the alert was raised (UTC).
generated_atstringoptionalISO 8601 timestamp indicating when this response was generated.
Errors
| Code | Message | When |
|---|---|---|
-32602 | invalid_params: limit: min:1 | limit is less than 1 |
-32602 | invalid_params: limit: max:200 | limit exceeds 200 |
-32001 | unauthorized | The API key is invalid/revoked, the IP is not allowed, or the key lacks the mcp:org scope. |
-32002 | insufficient_credits | Your credit balance is zero; top up from the dashboard |
-32603 | internal | Unexpected server error; the credit is automatically refunded |