Kevscope by CyberMax

{
  "protocolVersion": "0.3.0",
  "name": "Kevscope by CyberMax",
  "description": "Paid API keys from $19/month (Analyst: 10,000 calls a month); free tier 200 calls a day per IP with no key. Buy: https://kevscope-api.cybermaxtools.com/buy/analyst?s=lead · all plans: https://kevscope-api.cybermaxtools.com/docs#pricing. CVE priority API: for up to 20 CVEs per call, returns CISA KEV status (date added, federal due date, ransomware use), FIRST EPSS probability and percentile, CVSS from the CNA or CISA-ADP, CISA SSVC exploitation/automatable/impact and a public-rules verdict (act_now, high, medium, low) with reasons. Also recent KEV additions and a pre-KEV EPSS watchlist. REST + MCP server.",
  "author": "CyberMax",
  "wellKnownURI": "https://kevscope-api.cybermax-tools.workers.dev/.well-known/agent-card.json",
  "url": "https://kevscope-api.cybermaxtools.com/mcp",
  "version": "1.0.0",
  "provider": {
    "organization": "CyberMax",
    "url": "https://cybermaxtools.com/store/"
  },
  "documentationUrl": "https://kevscope-api.cybermaxtools.com/docs",
  "iconUrl": null,
  "supportsAuthenticatedExtendedCard": null,
  "security": [
    {},
    {
      "apiKey": []
    }
  ],
  "securitySchemes": {
    "apiKey": {
      "in": "header",
      "name": "x-api-key",
      "type": "apiKey",
      "description": "Optional paid key (https://kevscope-api.cybermaxtools.com/docs#pricing); leave out for the free tier."
    }
  },
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "stateTransitionHistory": false,
    "extensions": null
  },
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json"
  ],
  "skills": [
    {
      "id": "cve_priority",
      "name": "Prioritize CVEs",
      "description": "Patch-priority verdict for 1-20 CVE IDs with evidence: CISA KEV status (date added, due date, ransomware use), FIRST EPSS probability, CVSS (CNA or CISA-ADP), CISA SSVC exploitation/automatable/impact, vendor, product and links. Sorted most urgent first.",
      "tags": [
        "kevscope",
        "data api",
        "mcp"
      ],
      "examples": [],
      "inputModes": [],
      "outputModes": []
    },
    {
      "id": "kev_recent",
      "name": "New CISA KEV entries",
      "description": "CVEs added to the CISA Known Exploited Vulnerabilities catalog in the last N days, newest first, with due date, ransomware use and EPSS. Optional vendor/product text filter.",
      "tags": [
        "kevscope",
        "data api",
        "mcp"
      ],
      "examples": [],
      "inputModes": [],
      "outputModes": []
    },
    {
      "id": "epss_watchlist",
      "name": "Pre-KEV EPSS watchlist",
      "description": "The highest-EPSS CVEs (most likely to be exploited in 30 days) that are not in CISA KEV yet. Defaults to this year's CVE IDs.",
      "tags": [
        "kevscope",
        "data api",
        "mcp"
      ],
      "examples": [],
      "inputModes": [],
      "outputModes": []
    }
  ],
  "conformance": true,
  "conformance_errors": null,
  "homepage": null,
  "repository": null,
  "license": null,
  "pricing": null,
  "contact": null,
  "id": "f917a8f0-fbd6-4870-90a4-f0fc23f60acf",
  "category": "data-analytics",
  "category_secondary": null
}