@pipeworx/mcp-cisa-kev 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Pipeworx
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,55 @@
+# mcp-cisa-kev
+
+CISA Known Exploited Vulnerabilities catalog
+
+Part of [Pipeworx](https://pipeworx.io) — an MCP gateway connecting AI agents to 250+ live data sources.
+
+## Tools
+
+| Tool | Description |
+|------|-------------|
+
+## Quick Start
+
+Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
+
+```json
+{
+  "mcpServers": {
+    "cisa-kev": {
+      "url": "https://gateway.pipeworx.io/cisa-kev/mcp"
+    }
+  }
+}
+```
+
+Or connect to the full Pipeworx gateway for access to all 250+ data sources:
+
+```json
+{
+  "mcpServers": {
+    "pipeworx": {
+      "url": "https://gateway.pipeworx.io/mcp"
+    }
+  }
+}
+```
+
+## Using with ask_pipeworx
+
+Instead of calling tools directly, you can ask questions in plain English:
+
+```
+ask_pipeworx({ question: "your question about Cisa Kev data" })
+```
+
+The gateway picks the right tool and fills the arguments automatically.
+
+## More
+
+- [All tools and guides](https://github.com/pipeworx-io/examples)
+- [pipeworx.io](https://pipeworx.io)
+
+## License
+
+MIT

package/package.json

@@ -0,0 +1,20 @@
+{
+  "name": "@pipeworx/mcp-cisa-kev",
+  "version": "0.1.0",
+  "description": "CISA Known Exploited Vulnerabilities catalog",
+  "type": "module",
+  "main": "src/index.ts",
+  "types": "src/index.ts",
+  "keywords": ["mcp", "mcp-server", "model-context-protocol", "pipeworx", "cisa-kev"],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/pipeworx-io/mcp-cisa-kev"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0"
+  }
+}

package/server.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.pipeworx-io/cisa-kev",
+  "title": "Cisa Kev",
+  "description": "CISA Known Exploited Vulnerabilities catalog",
+  "version": "0.1.0",
+  "websiteUrl": "https://pipeworx.io/packs/cisa-kev",
+  "repository": {
+    "url": "https://github.com/pipeworx-io/mcp-cisa-kev",
+    "source": "github"
+  },
+  "remotes": [
+    {
+      "type": "streamable-http",
+      "url": "https://gateway.pipeworx.io/cisa-kev/mcp"
+    }
+  ]
+}

package/src/index.ts

@@ -0,0 +1,94 @@
+interface McpToolDefinition {
+  name: string;
+  description: string;
+  inputSchema: {
+    type: 'object';
+    properties: Record<string, unknown>;
+    required?: string[];
+  };
+}
+
+interface McpToolExport {
+  tools: McpToolDefinition[];
+  callTool: (name: string, args: Record<string, unknown>) => Promise<unknown>;
+  meter?: { credits: number };
+  cost?: Record<string, unknown>;
+  provider?: string;
+}
+
+/**
+ * CISA KEV MCP.
+ */
+
+
+const URL = 'https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json';
+const UA = 'pipeworx-mcp-cisa-kev/1.0 (+https://pipeworx.io)';
+const TTL_MS = 60 * 60 * 1000;
+
+type Entry = {
+  cveID: string;
+  vendorProject: string;
+  product: string;
+  vulnerabilityName: string;
+  dateAdded: string;
+  shortDescription: string;
+  requiredAction: string;
+  dueDate: string;
+  knownRansomwareCampaignUse?: string;
+  notes?: string;
+  cwes?: string[];
+};
+
+let CACHE: { at: number; catalog: { title?: string; catalogVersion?: string; dateReleased?: string; count?: number; vulnerabilities: Entry[] } } | null = null;
+
+const tools: McpToolExport['tools'] = [
+  { name: 'catalog', description: 'Full KEV catalog (metadata + entries).', inputSchema: { type: 'object', properties: {} } },
+  { name: 'entry', description: 'Single KEV entry by CVE id.', inputSchema: { type: 'object', properties: { cve_id: { type: 'string' } }, required: ['cve_id'] } },
+  { name: 'vendors', description: 'Distinct vendors with entries.', inputSchema: { type: 'object', properties: {} } },
+  { name: 'recent', description: 'Entries added in the last N days.', inputSchema: { type: 'object', properties: { days: { type: 'number', description: '1-365 (default 30)' } } } },
+];
+
+async function callTool(name: string, args: Record<string, unknown>): Promise<unknown> {
+  const data = await load();
+  switch (name) {
+    case 'catalog':
+      return data;
+    case 'entry': {
+      const cve = reqStr(args, 'cve_id', '"CVE-2022-22965"');
+      const hit = data.vulnerabilities.find((e) => e.cveID === cve);
+      return hit ?? null;
+    }
+    case 'vendors': {
+      const counts: Record<string, number> = {};
+      for (const e of data.vulnerabilities) counts[e.vendorProject] = (counts[e.vendorProject] ?? 0) + 1;
+      const list = Object.entries(counts).map(([vendor, count]) => ({ vendor, count })).sort((a, b) => b.count - a.count);
+      return { total_vendors: list.length, vendors: list };
+    }
+    case 'recent': {
+      const days = Math.min(365, Math.max(1, (args.days as number) ?? 30));
+      const cutoff = Date.now() - days * 86400_000;
+      const filtered = data.vulnerabilities.filter((e) => Date.parse(e.dateAdded) >= cutoff);
+      return { days, count: filtered.length, results: filtered };
+    }
+    default:
+      throw new Error(`Unknown tool: ${name}`);
+  }
+}
+
+async function load() {
+  const now = Date.now();
+  if (CACHE && now - CACHE.at < TTL_MS) return CACHE.catalog;
+  const res = await fetch(URL, { headers: { Accept: 'application/json', 'User-Agent': UA } });
+  if (!res.ok) throw new Error(`CISA KEV: ${res.status}`);
+  const catalog = (await res.json()) as { vulnerabilities: Entry[] };
+  CACHE = { at: now, catalog };
+  return catalog;
+}
+
+function reqStr(args: Record<string, unknown>, key: string, example: string): string {
+  const v = args[key];
+  if (typeof v !== 'string' || !v.trim()) throw new Error(`Required argument "${key}" is missing. Pass a string like ${example}.`);
+  return v;
+}
+
+export default { tools, callTool, meter: { credits: 1 } } satisfies McpToolExport;

package/tsconfig.json

@@ -0,0 +1,14 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "outDir": "dist",
+    "rootDir": "src",
+    "declaration": true
+  },
+  "include": ["src"]
+}