ENFR
List your agent

US CISA Known Exploited Vulnerabilities (KEV) & Ransomware Audit

MCP server · hosted · v1.0.0 · io.ceadigital/cisa-kev-exploited-vulns
Online · tested 1h agoNEW · 2h agoSeen in the registry 1h ago

US CISA Known Exploited Vulnerabilities (KEV) catalog & active ransomware campaign check.

Website ↗How to connect ↓

What it does

US CISA Known Exploited Vulnerabilities (KEV) & Ransomware Audit is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.

From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as scan code for vulnerabilities or review pull requests.

Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.

At a glance

Hosted (remote)YES
Local installNO
Version1.0.0
PriceNot in the registry
First seen05 Nov 2026
Last checked1h ago

How to connect

As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 1h ago (live check)

Hosted endpoint

  • https://ceadigital.io/mcp/cisa-kev streamable-http

In Claude Code: claude mcp add --transport http us-cisa-known-exploited-vulnerabilities-kev-ransomware-audit https://ceadigital.io/mcp/cisa-kev

MCP settings (Claude Desktop, Cursor and other MCP clients)

{
  "mcpServers": {
    "us-cisa-known-exploited-vulnerabilities-kev-ransomware-audit": {
      "url": "https://ceadigital.io/mcp/cisa-kev"
    }
  }
}

Live check

Electra Index connected to the hosted endpoint 1h ago

ONLINE US CISA Known Exploited Vulnerabilities (KEV) & Ransomware Audit answered an MCP connection on 05 Nov 2026 and introduced itself as b2a-fulfillment-factory 1.0.0 (MCP protocol 2025-03-26).

23 tools offered to AI assistants

  • gcp_catalog_search · Sub-millisecond FTS5 search across 17,671 Google Cloud, Vertex AI, and A2A service records.
  • vault_knowledge_search · FTS5 search across 36,628 video transcript chunks and 106,308 knowledge graph triples in vault.db.
  • sec_edgar_cik_lookup · SEC EDGAR company submission facts, quarterly filings, and CIK lookup under Lowe v. SEC Publisher's Exclusion.
  • github_repo_pulse · Extract repository activity pulse (stars, forks, open issues, license, last push) with ETag caching.
  • security_cve_audit · Audit package vulnerabilities and CVE advisories via OSV.dev database.
  • package_health_pulse · Parallel health pulse inspection across NPM and PyPI ecosystems.
  • fdic_bank_health · Factual public supervisory bank health and branch metrics compiled from FDIC under 12 CFR Part 328.
  • openalex_citation_graph · Academic citation graph metadata and scholarly network metrics from OpenAlex (CC0).
  • usgs_seismic_hazard · Seismic activity and earthquake risk profiles from USGS GeoJSON services.
  • dexscreener_token_audit · Real-time DEX liquidity, price, pair volume, and market cap analytics via DexScreener.
  • npi_medical_registry · CMS NPPES NPI Registry lookup for healthcare organizations and facilities (NPI-2 only, HIPAA safe harbor).
  • crtsh_cert_recon · Query Sectigo Certificate Transparency logs (crt.sh) for issued SSL/TLS certificates and subdomains.
Show 11 more
  • epss_exploit_score · Query FIRST.org Exploit Prediction Scoring System (EPSS) for 30-day real-world exploit probability.
  • gleif_lei_kyb · Query Global Legal Entity Identifier Foundation (GLEIF) registry for corporate KYB and LEI records.
  • cfpb_complaints · Query US Consumer Financial Protection Bureau (CFPB) complaint database (17 U.S.C. § 105 public domain).
  • usaspending_awards · Query USASpending.gov Federal Awards and Contractor Intelligence (17 U.S.C. § 105 public domain).
  • depsdev_openssf_scorecard · Query Google Open Source Insights (deps.dev) and Linux Foundation OpenSSF Security Scorecard (0-10) for any GitHub repository or package (#1 in MCP Registry).
  • nyfed_sofr_reference_rates · Query Federal Reserve Bank of New York official Secured Overnight Financing Rate (SOFR) benchmark rates, percentiles, and daily repo volume (#1 in MCP Registry).
  • cisa_kev_exploited_vulns · Query US CISA Known Exploited Vulnerabilities (KEV) Catalog for active in-the-wild exploitation, mandatory federal patch due dates, and ransomware usage.
  • corporate_kyb_and_risk_dossier · 5-Source Parallel Composite Dossier: Joins GLEIF LEI + SEC EDGAR + CFPB Complaints + USASpending Federal Awards + FDIC in <400ms with a 0-100 Counterparty Verification Score.
  • cyber_supply_chain_security_dossier · 5-Source Parallel Security Dossier: Joins crt.sh SSL Certs + Google deps.dev OpenSSF Scorecard + FIRST.org EPSS + CISA KEV + OSV.dev CVEs in <400ms with a 0-100 Security Posture Score.
  • agent_compliance_notary_attest · Tamper-evident SHA-256 hash-chained Agent Decision & Compliance Notary for EU AI Act, NIST AI RMF, and SOC2 autonomous agent audit trails.
  • submit_feedback_or_rate_quote · Free interactive MCP feedback, feature requests, and custom rate quote negotiation (alias: submit_mcp_feedback_or_request).

What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method

Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.

Tasks it helps with

Share of each task's required capabilities it covers
Scan code for vulnerabilities
Security Scanning
50%
Review pull requests
Security Scanning
50%

Similar tools

Listed for the same task: scan code for vulnerabilities
  • diffpilotREMOTELOCAL
    MCP server for PR code review, commit messages, changelogs, and secret detection
  • MCP Code Review ServerREMOTELOCAL
    Code review as an MCP server — structured reviews with OWASP security scanning
  • StrixREMOTELOCAL
    AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
  • mlab.shREMOTELOCAL
    Threat intel and DFIR: IOCs, CVEs, actors, SBOMs, domain scans, cases, memory, Kubernetes, Proxmox
  • SkillTotalREMOTELOCAL
    Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally
  • DraugrREMOTELOCAL
    Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk

Ready-made AI agents

An MCP server is a connector you add to your own assistant. These are finished products that do the same job for you:
All AI agents to scan code for vulnerabilities, ranked →

Facts & evidence

Each fact shows where it was seen and when.
FactValueEvidenceSourceLast confirmed
Hosted endpointhttps://ceadigital.io/mcp/cisa-kevDECLAREDSRC-001 Official MCP Registry1h ago
Local install (package)noDECLAREDSRC-001 Official MCP Registry1h ago
Remote access (hosted)yesDECLAREDSRC-001 Official MCP Registry1h ago
Websitehttps://ceadigital.ioDECLAREDSRC-001 Official MCP Registry1h ago
Registry statusactiveDECLAREDSRC-001 Official MCP Registry1h ago
Version1.0.0DECLAREDSRC-001 Official MCP Registry1h ago
MCP serveryesDECLAREDSRC-001 Official MCP Registry1h ago

Change history

  • NEW05 Nov 2026
    first seen in the index

Is this page accurate?

Flag it and our robot re-checks the official source. Reports never change a score.

Do you run US CISA Known Exploited Vulnerabilities (KEV) & Ransomware Audit? Know when it stops answering

For publishers · optional

Its hosted endpoint can be monitored. Monitoring Pro connects every 30 minutes like an AI assistant, emails you within the hour when it stops answering, keeps a 90-day availability history and adds your answer rate to your badge.

Monitor US CISA Known Exploited Vulnerabilities (KEV) & Ransomware AuditLaunch offer $39.99 once, for life instead of $9.99/month · All plans

Monitoring never changes a score or a rank.

Are you the publisher of US CISA Known Exploited Vulnerabilities (KEV) & Ransomware Audit?

Free · show your listing

An independent listing builds trust with your buyers. Announce it, and add the badge to your website or README.

Announce it on LinkedInListed on Electra Index
<a href="https://electraindex.com/mcp/us-cisa-known-exploited-vulnerabilities-kev-ransomware-audit?utm_source=badge&utm_medium=share&utm_campaign=listing"><img src="https://electraindex.com/api/badge/us-cisa-known-exploited-vulnerabilities-kev-ransomware-audit" alt="Listed on Electra Index"></a>

Questions about US CISA Known Exploited Vulnerabilities (KEV) & Ransomware Audit

How do I connect US CISA Known Exploited Vulnerabilities (KEV) & Ransomware Audit?

Use the hosted endpoint https://ceadigital.io/mcp/cisa-kev in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.

What tools does US CISA Known Exploited Vulnerabilities (KEV) & Ransomware Audit offer?

When Electra Index connected on 05 Nov 2026, it listed 23 tools: gcp_catalog_search, vault_knowledge_search, sec_edgar_cik_lookup, github_repo_pulse, security_cve_audit, package_health_pulse, fdic_bank_health, openalex_citation_graph and more. The full list is in "Live check" above.

Is US CISA Known Exploited Vulnerabilities (KEV) & Ransomware Audit online?

Yes. Its hosted endpoint answered an MCP connection from Electra Index 1h ago.

What can I use US CISA Known Exploited Vulnerabilities (KEV) & Ransomware Audit for?

Based on its description, it is most relevant to: scan code for vulnerabilities, review pull requests.