Your Data · Posture

list_my_triage_findings

List your organisation's triaged vulnerabilities (scored, with threat-actor / malware enrichment and an action priority), highest score first. Filter by action priority. Costs 1 credit.

POST
tools/call

Cost: 1 credit per successful call  ·  Scope: mcp:org  ·  Response shape: jsonb

Returns data scoped to your own organisation only — the organisation is resolved from your API key and injected server-side, never read from the request.

Parameters

prioritystringoptional

Optional filter on action priority (e.g. critical, high, medium, low). Maximum length 30.

limitintegeroptionaldefault: 50

Maximum number of findings to return. Accepted range: 1–200.

Example invocation

Ask your agent: "Show our highest-priority triaged vulnerabilities."

curl -s https://api.precursorintelligence.com/functions/v1/mcp \
  -H "Authorization: Bearer $PRECURSOR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_my_triage_findings","arguments":{"priority":"critical","limit":50}}}'

Response

result.content[0].text (parsed)
{
  "count": 2,
  "items": [
    {
      "cve_id": "CVE-2024-3094",
      "vulnerability_score": 97,
      "action_priority": "critical",
      "epss_score": 0.9401,
      "cvss_impact": 6.0,
      "known_exploited": true,
      "seen_wild": true,
      "threat_actors": ["APT29"],
      "malware_families": ["XZ Backdoor"],
      "targeted_industries": ["Technology"],
      "published_date": "2024-03-29T17:15:21.000Z",
      "created_at": "2026-06-10T13:20:00.000Z"
    },
    {
      "cve_id": "CVE-2024-21762",
      "vulnerability_score": 88,
      "action_priority": "high",
      "epss_score": 0.7421,
      "cvss_impact": 5.9,
      "known_exploited": true,
      "seen_wild": false,
      "threat_actors": [],
      "malware_families": [],
      "targeted_industries": ["Government"],
      "published_date": "2024-02-08T09:15:00.000Z",
      "created_at": "2026-06-09T10:05:00.000Z"
    }
  ],
  "generated_at": "2026-06-18T08:15:00.000Z"
}

The full MCP envelope, including _meta.precursor with request_id, credits, and response_truncated, is documented in Response Format.

Response fields

countintegeroptional

Number of findings returned (equals items.length).

itemsarrayoptional

Triaged vulnerabilities, ordered by vulnerability_score descending. Each object contains the fields below.

items[].cve_idstringoptional

CVE identifier for the vulnerability.

items[].vulnerability_scoreintegeroptional

Precursor Intelligence vulnerability score (0–100).

items[].action_prioritystringoptional

Recommended action priority (e.g. critical, high, medium, low).

items[].epss_scorenumber | nulloptional

EPSS exploit probability (0.0–1.0), or null when unavailable.

items[].cvss_impactnumber | nulloptional

CVSS impact sub-score, or null when unavailable.

items[].known_exploitedbooleanoptional

Whether the CVE is listed in the CISA KEV catalog.

items[].seen_wildbooleanoptional

Whether exploitation has been observed in the wild.

items[].threat_actorsarrayoptional

Threat actors associated with the vulnerability. Empty when none are known.

items[].malware_familiesarrayoptional

Malware families associated with the vulnerability. Empty when none are known.

items[].targeted_industriesarrayoptional

Industries targeted using this vulnerability. Empty when none are known.

items[].published_datestringoptional

ISO 8601 timestamp of the NVD publication date (UTC).

items[].created_atstringoptional

ISO 8601 timestamp when the finding was triaged for your organisation.

generated_atstringoptional

ISO 8601 timestamp indicating when this response was generated.

Errors

CodeMessageWhen
-32602invalid_params: priority: max:30priority exceeds 30 characters
-32602invalid_params: limit: min:1limit is less than 1
-32602invalid_params: limit: max:200limit exceeds 200
-32001unauthorizedThe API key is invalid/revoked, the IP is not allowed, or the key lacks the mcp:org scope.
-32002insufficient_creditsYour credit balance is zero; top up from the dashboard
-32603internalUnexpected server error; the credit is automatically refunded