Your Data · Attack Surface

`list_my_software`

List the software discovered across your organisation's assets: CPE products (vendor/product/version) from EdgeProtect scans plus detected website technologies. Costs 1 credit.

POST

tools/call

Cost: 1 credit per successful call · Scope: mcp:org · Response shape: jsonb

Returns data scoped to your own organisation only — the organisation is resolved from your API key and injected server-side, never read from the request.

Parameters

limitintegeroptionaldefault: 100

Maximum number of entries to return per collection. Accepted range: 1–500.

Example invocation

Ask your agent: "What software have we got exposed across our assets?"

curl -s https://api.precursorintelligence.com/functions/v1/mcp \
  -H "Authorization: Bearer $PRECURSOR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_my_software","arguments":{"limit":100}}}'

Response

result.content[0].text (parsed)

{
  "cpe_products": [
    {
      "vendor": "Microsoft",
      "product": "Internet Information Services",
      "version": "10.0",
      "cpe": "cpe:2.3:a:microsoft:internet_information_services:10.0:*:*:*:*:*:*:*"
    },
    {
      "vendor": "OpenBSD",
      "product": "OpenSSH",
      "version": "9.6",
      "cpe": "cpe:2.3:a:openbsd:openssh:9.6:*:*:*:*:*:*:*"
    },
    {
      "vendor": "F5",
      "product": "BIG-IP",
      "version": "17.1.0",
      "cpe": "cpe:2.3:a:f5:big-ip:17.1.0:*:*:*:*:*:*:*"
    }
  ],
  "detected_tech": [
    {
      "url": "https://www.precursorsecurity.com",
      "name": "Precursor Security — Marketing",
      "is_favorite": true,
      "technologies": ["nginx", "Cloudflare", "React", "HSTS"],
      "scanned_at": "2026-06-14T02:14:00.000Z"
    },
    {
      "url": "https://portal.precursorsecurity.com",
      "name": "Customer Portal",
      "is_favorite": false,
      "technologies": ["Microsoft IIS", "ASP.NET", "jQuery"],
      "scanned_at": "2026-06-13T02:09:00.000Z"
    }
  ],
  "generated_at": "2026-06-18T08:15:00.000Z"
}

The full MCP envelope, including _meta.precursor with request_id, credits, and response_truncated, is documented in Response Format.

Response fields

cpe_productsarrayoptional

CPE products identified from EdgeProtect scans. Each object contains the fields below.

cpe_products[].vendorstringoptional

Vendor name from the CPE record, e.g. Microsoft.

cpe_products[].productstringoptional

Product name from the CPE record, e.g. Internet Information Services.

cpe_products[].versionstringoptional

Product version from the CPE record.

cpe_products[].cpestringoptional

The full CPE 2.3 URI for the product.

detected_techarrayoptional

Website technologies detected across your monitored URLs. Each object contains the fields below.

detected_tech[].urlstringoptional

The URL that was fingerprinted.

detected_tech[].namestringoptional

Human-readable name given to the monitored site.

detected_tech[].is_favoritebooleanoptional

Whether the site is flagged as a favourite in your organisation's settings.

detected_tech[].technologiesarrayoptional

Array of technology name strings detected on the site.

detected_tech[].scanned_atstringoptional

ISO 8601 timestamp of when the technologies were last detected (UTC).

generated_atstringoptional

ISO 8601 timestamp indicating when this response was generated.

Errors

Code	Message	When
`-32602`	`invalid_params: limit: min:1`	`limit` is less than 1
`-32602`	`invalid_params: limit: max:500`	`limit` exceeds 500
`-32001`	`unauthorized`	The API key is invalid/revoked, the IP is not allowed, or the key lacks the `mcp:org` scope.
`-32002`	`insufficient_credits`	Your credit balance is zero; top up from the dashboard
`-32603`	`internal`	Unexpected server error; the credit is automatically refunded