CVE & EPSS

`search_cves_by_vendor`

Returns the highest-EPSS CVEs for a given vendor, sorted by EPSS score descending. Use this tool to quickly surface the most likely-to-be-exploited vulnerabilities across a vendor's product portfolio. Costs 1 credit.

POST

tools/call

Cost: 1 credit per successful call · Response shape: array-rows

Parameters

vendorstringrequired

Vendor name, 1–128 characters. The server lowercases the value before matching, so Cisco and cisco are equivalent.

limitintegeroptionaldefault: 10

Maximum number of CVEs to return. Accepted range: 1–50.

Example invocation

Ask your agent: "What are Cisco's top 25 CVEs ranked by EPSS score?"

curl -s https://mcp.precursorintelligence.com \
  -H "Authorization: Bearer $PRECURSOR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"search_cves_by_vendor","arguments":{"vendor":"cisco","limit":25}}}'

Response

result.content[0].text (parsed)

{
  "count": 25,
  "items": [
    {
      "cve_id": "CVE-2023-20198",
      "description": "A privilege escalation vulnerability in Cisco IOS XE Software web UI allows an unauthenticated remote attacker to create an account with privilege level 15 access.",
      "severity": "Critical",
      "cvss_score": 10.0,
      "cvss_version": "v3.1",
      "published_date": "2023-10-16T20:15:00",
      "epss_score": 0.97531,
      "is_kev": true
    },
    {
      "cve_id": "CVE-2024-20399",
      "description": "A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system.",
      "severity": "Medium",
      "cvss_score": 6.7,
      "cvss_version": "v3.1",
      "published_date": "2024-07-01T16:15:00",
      "epss_score": 0.91204,
      "is_kev": false
    }
  ],
  "generated_at": "2026-05-18T10:24:31.118Z"
}

count equals items.length, not a grand total. The full MCP envelope is described in Response Format.

Errors

Code	Message	When
`-32602`	`invalid_params: vendor: required_string`	`vendor` was omitted or not a string
`-32602`	`invalid_params: vendor: length:1..128`	`vendor` exceeds 128 characters or is empty
`-32602`	`invalid_params: limit: integer`	`limit` is not an integer
`-32602`	`invalid_params: limit: min:1`	`limit` is less than 1
`-32602`	`invalid_params: limit: max:50`	`limit` exceeds 50
`-32001`	`unauthorized`	API key is invalid, revoked, or the request IP is not on the allowlist
`-32002`	`insufficient_credits`	Credit balance is zero; top up from the dashboard

Argument-validation errors (-32602) are never charged. For the full error reference see Errors.