The Cisa Cybersecurity MCP Server MCP server,
connected in one click.

cisa_list_reference — Decode the vocabulary the other CISA tools take as input. Topics cover the BOD 26-04 remediation timeline table and what each tier means, th

cisa_check_cve_status — Check CVE IDs against the CISA Known Exploited Vulnerabilities catalog — up to 200 per call, served from a cached catalog snapshot at no ups

cisa_search_kev — Search the CISA Known Exploited Vulnerabilities catalog across every entry in the cached snapshot. Filter by vendor or product using CISA's

cisa_get_ssvc — Fetch the SSVC decision points CISA publishes per CVE as a CVE Authorized Data Publisher — Exploitation, Automatable, and Technical Impact —

cisa_search_ics_advisories — Search the CISA industrial control system advisory corpus — 3,926 CSAF 2.0 documents covering PLC, HMI, SCADA, building-automation, and medi

cisa_get_advisory — Read one CISA industrial control system advisory in full: affected products flattened from the CSAF product tree into vendor, product, and v

cisa_get_alerts — List what CISA has published recently — its combined advisory feed, its alerts feed, or its ICS advisory feed. Each feed is a rolling window