Remediation

list_remediation_summary

Returns the latest 5 AI-generated remediation summaries for a CVE, drawn from intelligence reporting and analysis. Costs 1 credit.

POST
tools/call

Cost: 1 credit per successful call  ·  Response shape: jsonb

Parameters

cve_idstringrequired

CVE identifier. Pattern: ^CVE-[0-9]{4}-[0-9]{4,7}$. Uppercased server-side.

The result is capped at the 5 most recent summaries. There is no limit parameter.

Example invocation

Ask your agent: "Show me the latest AI-generated remediation guidance for CVE-2024-3094."

curl -s https://mcp.precursorintelligence.com \
  -H "Authorization: Bearer $PRECURSOR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_remediation_summary","arguments":{"cve_id":"CVE-2024-3094"}}}'

Response

result.content[0].text (parsed)
{
  "cve_id": "CVE-2024-3094",
  "count": 2,
  "items": [
    {
      "id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
      "cve_id": "CVE-2024-3094",
      "status": "success",
      "summary": "Downgrade xz-utils to version 5.4.6 or earlier, or remove all affected builds. Confirm the installed binary hash does not match any known backdoored artifact. Rotate SSH host keys on systems that ran the affected version, and audit authentication logs for anomalous private-key usage.",
      "created_at": "2026-05-18T08:00:00Z",
      "error_message": null
    },
    {
      "id": "b2c3d4e5-f6a7-8901-bcde-f12345678901",
      "cve_id": "CVE-2024-3094",
      "status": "success",
      "summary": "Block outbound connections to known C2 infrastructure at the network perimeter. Apply vendor-supplied patches or revert to a clean xz-utils package. Re-scan the host with an updated signature set to confirm removal.",
      "created_at": "2026-05-11T14:22:00Z",
      "error_message": null
    }
  ],
  "generated_at": "2026-05-29T10:15:00Z"
}

Note: the full MCP envelope (including _meta.precursor with request_id, credits, and generated_at) is described in Response Format.

Errors

CodeMessageWhen
-32602invalid_params: cve_id: required_stringcve_id was not provided
-32602invalid_params: cve_id: patterncve_id does not match the CVE pattern
-32001unauthorizedAPI key is invalid, revoked, or not allowed from this IP
-32002insufficient_creditsCredit balance is zero; top up from the dashboard

A well-formed cve_id with no summaries on record returns a successful response with count: 0 and an empty items array; no credit is charged for a not-found result.

For the complete error reference, see Errors.