Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database

{
  "checks": {
    "action_safety_probe": {
      "details": {
        "auth_present": false,
        "confirmation_signals": [],
        "safeguard_count": 0,
        "summary": {
          "bulk_access_tools": 0,
          "capability_distribution": {},
          "destructive_tools": 0,
          "egress_tools": 0,
          "exec_tools": 0,
          "high_risk_tools": 0,
          "risk_distribution": {
            "critical": 0,
            "high": 0,
            "low": 0,
            "medium": 0
          },
          "secret_tools": 0,
          "tool_count": 0
        }
      },
      "latency_ms": null,
      "status": "ok"
    },
    "advanced_capabilities_probe": {
      "details": {
        "capabilities": {
          "completions": false,
          "elicitation": false,
          "prompts": false,
          "resource_links": false,
          "resources": false,
          "roots": false,
          "sampling": false,
          "structured_outputs": false
        },
        "enabled": [],
        "enabled_count": 0,
        "initialize_capability_keys": [
          "experimental",
          "prompts",
          "tools"
        ]
      },
      "latency_ms": null,
      "status": "missing"
    },
    "connector_publishability_probe": {
      "details": {
        "blockers": [
          "tools_list",
          "server_card",
          "tool_surface"
        ],
        "criteria": {
          "action_safety": true,
          "auth_flow": true,
          "connector_replay": true,
          "initialize": true,
          "protocol_version": true,
          "remote_transport": true,
          "request_association": true,
          "server_card": false,
          "session_resume": true,
          "step_up_auth": true,
          "tool_surface": false,
          "tools_list": false,
          "transport_compliance": true
        },
        "high_risk_tools": 0,
        "tool_count": 0,
        "transport": "streamable-http"
      },
      "latency_ms": null,
      "status": "error"
    },
    "connector_replay_probe": {
      "details": {
        "reason": "no_tools"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "determinism_probe": {
      "details": {
        "reason": "tools_list_unavailable"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "initialize": {
      "details": {
        "headers": {
          "content-type": "text/event-stream",
          "mcp-session-id": "b8ced41d588645879322b4ddc350e7e8",
          "strict-transport-security": "max-age=31536000; includeSubDomains"
        },
        "http_status": 200,
        "payload": {
          "id": 1,
          "jsonrpc": "2.0",
          "result": {
            "capabilities": {
              "experimental": {},
              "prompts": {
                "listChanged": false
              },
              "tools": {
                "listChanged": false
              }
            },
            "instructions": "You have access to the Exploit Intelligence Platform (EIP) \u2014 370K+ vulnerabilities and 105K+ exploits from NVD, CISA KEV, EPSS, ExploitDB, Metasploit, GitHub, and nomi-sec.\n\nTOOL SELECTION GUIDE:\n- \"What vulns affect OpenSSH?\" or any vendor/product query \u2192 search_vulnerabilities (has full-text query= param)\n- Specific CVE ID mentioned \u2192 get_vulnerability (full brief with ranked exploits, AI analysis, MITRE ATT&CK)\n- \"Find all Metasploit modules\" or filter exploits by source/language/author \u2192 search_exploits (structured filters ONLY \u2014 no free-text query)\n- \"Find reliable RCE exploits\" \u2192 search_exploits with attack_type, complexity, reliability filters\n- \"Exploits for CVE-2024-XXXX\" \u2192 PREFER get_vulnerability (includes exploits). Use search_exploits with cve= only if you need to page through 50+ exploits.\n- Trojans or backdoored exploits \u2192 search_exploits with llm_classification=trojan\n- All exploits from a vendor \u2192 search_exploits with vendor= filter\n- Exploit authors \u2192 list_authors or get_author\n- Vulnerability types or CWEs \u2192 list_cwes or get_cwe\n- Which vendors have the most vulns \u2192 list_vendors\n- \"What products does Microsoft have?\" or need exact product names \u2192 list_products\n- EDB number or GHSA ID \u2192 lookup_alt_id to resolve to CVE\n- Tech stack risk assessment \u2192 audit_stack\n- Nuclei templates or Shodan/FOFA/Google dorks \u2192 get_nuclei_templates\n- Pentest report finding \u2192 generate_finding\n- Read exploit source code \u2192 get_exploit_code\n- Full AI analysis for a single exploit (trojan check, MITRE, summary) \u2192 get_exploit_analysis\n\nIMPORTANT \u2014 search_vulnerabilities vs search_exploits:\n- search_vulnerabilities supports free-text query= (\"openssh\", \"log4j\", \"apache httpd\"). START HERE for product research.\n- search_exploits has NO query param. It only has structured filters (source, language, cve, vendor, product, attack_type, etc.).\n- To find exploits for a product: search_vulnerabilities first \u2192 then get_vulnerability on interesting CVEs (exploits are included).\n\nKEY CONCEPTS:\n- EPSS: Probability (0-100%) that a CVE will be exploited in the next 30 days. >90% is very high risk.\n- CVSS: Severity score (0-10). Critical >= 9.0, High >= 7.0, Medium >= 4.0.\n- KEV: CISA Known Exploited Vulnerabilities \u2014 confirmed actively exploited in the wild.\n- Exploit ranking: Metasploit modules > verified ExploitDB > GitHub by stars. Trojans flagged at bottom.\n- AI Analysis: 61K+ exploits analyzed. Results include attack_type (RCE, SQLi, XSS, DoS, LPE, auth_bypass, info_leak), complexity (trivial/simple/moderate/complex), reliability (reliable/unreliable/untested/theoretical), target_software, MITRE ATT&CK techniques, and deception_indicators for trojans.\nMULTI-TOOL WORKFLOWS:\n- \"Tell me about CVE-XXXX\": get_vulnerability \u2192 full brief including exploits with MITRE techniques\n- \"What vulns affect Apache?\": search_vulnerabilities(query=\"apache httpd\", has_exploits=true) \u2192 get_vulnerability on top hits\n- \"What should I worry about?\": audit_stack with technologies \u2192 get_vulnerability on top findings\n- \"Is there a Metasploit module for X?\": get_vulnerability \u2192 check METASPLOIT MODULES section\n- \"Write a finding for my report\": generate_finding with CVE, target, and notes\n",
            "protocolVersion": "2025-03-26",
            "serverInfo": {
              "name": "eip-mcp",
              "version": "0.3.17"
            }
          }
        },
        "url": "https://mcp.exploit-intel.com/mcp"
      },
      "latency_ms": 81.18,
      "status": "ok"
    },
    "interactive_flow_probe": {
      "details": {
        "oauth_supported": false,
        "prompt_available": false,
        "risk_hits": [],
        "safe_hits": []
      },
      "latency_ms": null,
      "status": "missing"
    },
    "oauth_authorization_server": {
      "details": {
        "reason": "no_authorization_server"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "oauth_protected_resource": {
      "details": {
        "error": "Client error '404 Not Found' for url 'https://mcp.exploit-intel.com/.well-known/oauth-protected-resource'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
        "url": "https://mcp.exploit-intel.com/.well-known/oauth-protected-resource"
      },
      "latency_ms": 44.66,
      "status": "error"
    },
    "official_registry_probe": {
      "details": {
        "direct_match": true,
        "official_peer_count": 1,
        "registry_identifier": "com.exploit-intel/eip-mcp",
        "registry_source": "official_registry"
      },
      "latency_ms": null,
      "status": "ok"
    },
    "openid_configuration": {
      "details": {
        "reason": "no_authorization_server"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "probe_noise_resilience": {
      "details": {
        "headers": {
          "content-type": "text/html; charset=iso-8859-1",
          "strict-transport-security": "max-age=31536000; includeSubDomains"
        },
        "http_status": 404,
        "url": "https://mcp.exploit-intel.com/robots.txt"
      },
      "latency_ms": 42.46,
      "status": "ok"
    },
    "prompt_get": {
      "details": {
        "reason": "not_advertised"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "prompts_list": {
      "details": {
        "error": "Client error '400 Bad Request' for url 'https://mcp.exploit-intel.com/mcp/'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
        "headers": {
          "content-type": "application/json",
          "strict-transport-security": "max-age=31536000; includeSubDomains"
        },
        "http_status": 400,
        "payload": {},
        "reason": "not_advertised",
        "url": "https://mcp.exploit-intel.com/mcp"
      },
      "latency_ms": 84.38,
      "status": "missing"
    },
    "protocol_version_probe": {
      "details": {
        "claimed_version": "2025-03-26",
        "lag_days": 244,
        "latest_known_version": "2025-11-25",
        "releases_behind": 2,
        "validator_protocol_version": "2025-03-26"
      },
      "latency_ms": null,
      "status": "warning"
    },
    "provenance_divergence_probe": {
      "details": {
        "direct_official_match": true,
        "drift_fields": [],
        "metadata_document_count": 2,
        "registry_homepage": null,
        "registry_repository": null,
        "registry_title": null,
        "registry_version": null,
        "server_card_homepage": null,
        "server_card_repository": null,
        "server_card_title": null,
        "server_card_version": null
      },
      "latency_ms": null,
      "status": "ok"
    },
    "request_association_probe": {
      "details": {
        "reason": "no_request_association_capabilities_advertised"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "resource_read": {
      "details": {
        "reason": "not_advertised"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "resources_list": {
      "details": {
        "error": "Client error '400 Bad Request' for url 'https://mcp.exploit-intel.com/mcp/'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
        "headers": {
          "content-type": "application/json",
          "strict-transport-security": "max-age=31536000; includeSubDomains"
        },
        "http_status": 400,
        "payload": {},
        "reason": "not_advertised",
        "url": "https://mcp.exploit-intel.com/mcp"
      },
      "latency_ms": 76.48,
      "status": "missing"
    },
    "server_card": {
      "details": {
        "error": "Client error '404 Not Found' for url 'https://mcp.exploit-intel.com/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
        "url": "https://mcp.exploit-intel.com/.well-known/mcp/server-card.json"
      },
      "latency_ms": 67.94,
      "status": "error"
    },
    "session_resume_probe": {
      "details": {
        "headers": {
          "content-type": "text/event-stream",
          "mcp-session-id": "b8ced41d588645879322b4ddc350e7e8",
          "strict-transport-security": "max-age=31536000; includeSubDomains"
        },
        "http_status": 200,
        "payload": {
          "id": 301,
          "jsonrpc": "2.0",
          "result": {
            "tools": [
              {
                "description": "Search the Exploit Intelligence Platform for vulnerabilities (CVEs). Returns a list of matching CVEs with CVSS scores, EPSS exploitation probability, exploit counts, CISA KEV status, VulnCheck KEV, InTheWild.io exploitation signals, and ransomware attribution. Supports full-text search, severity/vendor/product/ecosystem/CWE filters, CVSS/EPSS thresholds, plus any_exploited and ransomware filters. When sort is omitted, the API may automatically prefer newest exploitation, exploit, or nuclei-template activity based on the filters you set. Examples: query='apache httpd' with has_exploits=true; vendor='fortinet' with severity='critical' and is_kev=true sorted by epss_desc; any_exploited=true with ransomware=true for ransomware-linked CVEs; cwe='89' with min_cvss=9 for critical SQL injection CVEs.",
                "inputSchema": {
                  "properties": {
                    "any_exploited": {
                      "description": "Only return CVEs exploited in the wild (CISA KEV + VulnCheck KEV + InTheWild.io)",
                      "type": "boolean"
                    },
                    "cwe": {
                      "description": "Filter by CWE ID (e.g. '79' or 'CWE-79')",
                      "type": "string"
                    },
                    "date_from": {
                      "description": "Start date for CVE publication (YYYY-MM-DD)",
                      "type": "string"
                    },
                    "date_to": {
                      "description": "End date for CVE publication (YYYY-MM-DD)",
                      "type": "string"
                    },
                    "ecosystem": {
                      "description": "Filter by package ecosystem",
                      "enum": [
                        "npm",
                        "pip",
                        "maven",
                        "go",
                        "crates",
                        "nuget",
                        "rubygems",
                        "composer"
                      ],
                      "type": "string"
                    },
                    "has_exploits": {
                      "description": "Only return CVEs with public exploit code",
                      "type": "boolean"
                    },
                    "has_nuclei": {
                      "description": "Only return CVEs with Nuclei scanner templates",
                      "type": "boolean"
                    },
                    "is_kev": {
                      "description": "Only return CISA Known Exploited Vulnerabilities",
                      "type": "boolean"
                    },
                    "min_cvss": {
                      "description": "Minimum CVSS score (0-10)",
                      "type": "number"
                    },
                    "min_epss": {
                      "description": "Minimum EPSS score (0-1)",
                      "type": "number"
                    },
                    "page": {
                      "description": "Page number (default: 1)",
                      "type": "integer"
                    },
                    "per_page": {
                      "description": "Results per page (1-25, default: 10)",
                      "type": "integer"
                    },
                    "product": {
                      "description": "Filter by product name (e.g. 'exchange', 'pan-os')",
                      "type": "string"
                    },
                    "query": {
                      "description": "Search keywords (e.g. 'apache httpd', 'log4j'). Optional if filters are provided.",
                      "type": "string"
                    },
                    "ransomware": {
                      "description": "Only return CVEs with confirmed ransomware campaign use",
                      "type": "boolean"
                    },
                    "severity": {
                      "description": "Filter by severity level",
                      "enum": [
                        "critical",
                        "high",
                        "medium",
                        "low"
                      ],
                      "type": "string"
                    },
                    "sort": {
                      "description": "Sort order. Aliases are normalized to the current server schema.",
                      "enum": [
                        "newest",
                        "published_newest",
                        "oldest",
                        "published_oldest",
                        "cvss_desc",
                        "epss_desc",
                        "relevance",
                        "signal_newest",
                        "exploit_newest",
                        "nuclei_newest"
                      ],
                      "type": "string"
                    },
                    "vendor": {
                      "description": "Filter by vendor name (e.g. 'microsoft', 'fortinet')",
                      "type": "string"
                    },
                    "year": {
                      "description": "Filter by CVE year (e.g. 2024)",
                      "type": "integer"
                    }
                  },
                  "type": "object"
                },
                "name": "search_vulnerabilities"
              },
              {
                "description": "Get a full intelligence brief for a specific vulnerability. Accepts both CVE-IDs (e.g. CVE-2024-3400) and EIP-IDs (e.g. EIP-2026-12345 for pre-CVE entries). Returns detailed information including CVSS score and vector, EPSS exploitation probability, CISA KEV status, description, affected products, ranked exploits (grouped by Metasploit modules, verified ExploitDB, GitHub PoCs, and trojans), Nuclei scanner templates with recon dorks, alternate identifiers, and references. Exploits are ranked by quality: Metasploit modules first (peer-reviewed), then verified ExploitDB, then GitHub by stars. Trojans are flagged at the bottom.",
                "inputSchema": {
                  "properties": {
                    "cve_id": {
                      "description": "CVE or EIP identifier (e.g. 'CVE-2024-3400' or 'EIP-2026-12345')",
                      "type": "string"
                    }
                  },
                  "required": [
                    "cve_id"
                  ],
                  "type": "object"
                },
                "name": "get_vulnerability"
              },
              {
                "description": "Retrieve the source code of a specific exploit by its platform ID. IMPORTANT: Use the platform's internal ID shown as [id=XXXXX] in results, NOT the ExploitDB number (EDB-XXXXX). These are different numbering systems. Returns code from the exploit archive. If no file_path is specified, auto-selects the most relevant code file. Use this to analyze exploit mechanics, understand attack techniques, or review PoC code.",
                "inputSchema": {
                  "properties": {
                    "exploit_id": {
                      "description": "Platform exploit ID (the [id=XXXXX] number from results \u2014 NOT the EDB number)",
                      "type": "integer"
                    },
                    "file_path": {
                      "description": "Relative path inside the exploit archive (optional \u2014 auto-selects if omitted). Absolute paths and traversal patterns are rejected.",
                      "pattern": "^(?![\\\\/])(?![A-Za-z]:[\\\\/])(?!.*\\.\\.)(?!.*~).{1,500}$",
                      "type": "string"
                    }
                  },
                  "required": [
                    "exploit_id"
                  ],
                  "type": "object"
                },
                "name": "get_exploit_code"
              },
              {
                "description": "Get the full AI analysis for a single exploit by its platform ID. Returns classification (working_poc, trojan, suspicious, scanner, stub, writeup), attack type, complexity, reliability, confidence score, authentication requirements, target software, a summary of what the exploit does, prerequisites, MITRE ATT&CK techniques, deception indicators for trojans, and the standalone backdoor-review verdict with operator-risk notes when available. Use this to check if an exploit is safe before reviewing its code. Example: exploit_id=61514 returns a TROJAN warning with deception indicators.",
                "inputSchema": {
                  "properties": {
                    "exploit_id": {
                      "description": "Platform exploit ID (the [id=XXXXX] number from results \u2014 NOT the EDB number)",
                      "type": "integer"
                    }
                  },
                  "required": [
                    "exploit_id"
                  ],
                  "type": "object"
                },
                "name": "get_exploit_analysis"
              },
              {
                "description": "Get Nuclei scanner templates and recon dorks for a vulnerability. Returns template metadata, severity, verification status, tags, and ready-to-use Shodan, FOFA, and Google dork queries for target identification. Accepts both CVE-IDs and EIP-IDs. Use this to plan scanning or reconnaissance.",
                "inputSchema": {
                  "properties": {
                    "cve_id": {
                      "description": "CVE or EIP identifier (e.g. 'CVE-2024-27198')",
                      "type": "string"
                    }
                  },
                  "required": [
                    "cve_id"
                  ],
                  "type": "object"
                },
                "name": "get_nuclei_templates"
              },
              {
                "description": "Get platform-wide statistics from the Exploit Intelligence Platform. Returns total counts of vulnerabilities, exploits, KEV entries, Nuclei templates, vendors, and authors, plus the last data update timestamp.",
                "inputSchema": {
                  "properties": {},
                  "type": "object"
                },
                "name": "get_platform_stats"
              },
              {
                "description": "Check the EIP API health and data freshness. Returns database status and timestamps for each of the 10 ingestion sources (NVD, KEV, EPSS, ExploitDB, GitHub, Metasploit, etc.).",
                "inputSchema": {
                  "properties": {},
                  "type": "object"
                },
                "name": "check_health"
              },
              {
                "description": "Browse and filter exploits using STRUCTURED FILTERS ONLY (no free-text query). Use this to filter by source (github, metasploit, exploitdb, nomisec, gitlab, inthewild, vulncheck_xdb), language (python, ruby, etc.), LLM classification (working_poc, trojan, suspicious, scanner, stub, writeup, tool, no_code), author, min stars, code availability, CVE ID, vendor, or product. Also filter by AI analysis: attack_type (RCE, SQLi, XSS, DoS, LPE, auth_bypass, info_leak), complexity (trivial/simple/moderate/complex), reliability (reliable/unreliable/untested/theoretical), requires_auth. NOTE: To search by product name (e.g. 'OpenSSH', 'Apache'), use search_vulnerabilities instead \u2014 it has free-text query and get_vulnerability already includes exploits in the response. Examples: source='metasploit' for all Metasploit modules; attack_type='RCE' with reliability='reliable' for weaponizable RCE exploits; cve='CVE-2024-3400' for all exploits targeting a specific CVE; vendor='mitel' for all Mitel exploits.",
                "inputSchema": {
                  "properties": {
                    "attack_type": {
                      "description": "Filter by attack type from AI analysis: RCE, SQLi, XSS, DoS, LPE, auth_bypass, info_leak, deserialization, other",
                      "type": "string"
                    },
                    "author": {
                      "description": "Filter by author name",
                      "type": "string"
                    },
                    "complexity": {
                      "description": "Filter by exploit complexity: trivial, simple, moderate, complex",
                      "type": "string"
                    },
                    "cve": {
                      "description": "Filter by CVE ID (e.g. 'CVE-2024-3400') \u2014 returns all exploits for that CVE",
                      "type": "string"
                    },
                    "has_code": {
                      "description": "Only exploits with downloadable code",
                      "type": "boolean"
                    },
                    "language": {
                      "description": "Filter by language: python, ruby, go, c, etc.",
                      "type": "string"
                    },
                    "llm_classification": {
                      "description": "Filter by LLM classification: working_poc, trojan, suspicious, scanner, stub, writeup, tool, no_code",
                      "type": "string"
                    },
                    "min_stars": {
                      "description": "Minimum GitHub stars",
                      "type": "integer"
                    },
                    "page": {
                      "description": "Page number (default: 1)",
                      "type": "integer"
                    },
                    "per_page": {
                      "description": "Results per page (1-25, default: 10)",
                      "type": "integer"
                    },
                    "product": {
                      "description": "Filter by product name (e.g. 'micollab', 'pan-os')",
                      "type": "string"
                    },
                    "reliability": {
                      "description": "Filter by exploit reliability: reliable, unreliable, untested, theoretical",
                      "type": "string"
                    },
                    "requires_auth": {
                      "description": "Filter by whether exploit requires authentication",
                      "type": "boolean"
                    },
                    "sort": {
                      "description": "Sort order",
                      "enum": [
                        "newest",
                        "stars_desc"
                      ],
                      "type": "string"
                    },
                    "source": {
                      "description": "Filter by source: github, metasploit, exploitdb, nomisec, writeup, gitlab, inthewild, vulncheck_xdb",
                      "type": "string"
                    },
                    "vendor": {
                      "description": "Filter by vendor name (e.g. 'mitel', 'fortinet') \u2014 returns exploits for all CVEs affecting that vendor",
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "name": "search_exploits"
              },
              {
                "description": "List exploit authors/researchers ranked by exploit count. Returns the top security researchers with their exploit counts and handles. Use this when asked 'who are the top exploit authors?' or 'who writes the most exploits?'",
                "inputSchema": {
                  "properties": {
                    "page": {
                      "description": "Page number (default: 1)",
                      "type": "integer"
                    },
                    "per_page": {
                      "description": "Results per page (1-50, default: 25)",
                      "type": "integer"
                    }
                  },
                  "type": "object"
                },
                "name": "list_authors"
              },
              {
                "description": "Get an exploit author's profile with all their exploits. Returns author name, handle, total exploit count, activity start date, and a paginated list of their exploits with CVE context. Use this when asked about a specific researcher like 'show me all exploits by Chocapikk'.",
                "inputSchema": {
                  "properties": {
                    "author_name": {
                      "description": "Author name (e.g. 'Chocapikk')",
                      "type": "string"
                    }
                  },
                  "required": [
                    "author_name"
                  ],
                  "type": "object"
                },
                "name": "get_author"
              },
              {
                "description": "List CWE (Common Weakness Enumeration) categories ranked by vulnerability count. Returns CWE IDs, names, short labels, exploit likelihood, and how many CVEs have that weakness. Use this when asked 'what are the most common vulnerability types?'",
                "inputSchema": {
                  "properties": {},
                  "type": "object"
                },
                "name": "list_cwes"
              },
              {
                "description": "Get details for a specific CWE including full name, description, exploit likelihood, parent CWE, and total vulnerability count. Example: cwe_id='CWE-79' returns details about Cross-Site Scripting.",
                "inputSchema": {
                  "properties": {
                    "cwe_id": {
                      "description": "CWE identifier (e.g. 'CWE-79' or '79')",
                      "type": "string"
                    }
                  },
                  "required": [
                    "cwe_id"
                  ],
                  "type": "object"
                },
                "name": "get_cwe"
              },
              {
                "description": "List software vendors ranked by vulnerability count. Returns the top 200 vendors with their total CVE counts. Use this when asked 'which vendors have the most vulnerabilities?' or to understand the threat landscape by vendor.",
                "inputSchema": {
                  "properties": {},
                  "type": "object"
                },
                "name": "list_vendors"
              },
              {
                "description": "List products for a specific vendor with vulnerability counts. Use this to discover exact product names for filtering. Product names in the database use CPE conventions (e.g. 'exchange_server' not 'exchange', 'windows_10' not 'windows 10'). Example: vendor='microsoft' returns products like exchange_server, windows_10, office, edge_chromium.",
                "inputSchema": {
                  "properties": {
                    "vendor": {
                      "description": "Vendor name (e.g. 'microsoft', 'apache', 'fortinet')",
                      "type": "string"
                    }
                  },
                  "required": [
                    "vendor"
                  ],
                  "type": "object"
                },
                "name": "list_products"
              },
              {
                "description": "Look up a vulnerability by an alternate identifier such as an ExploitDB ID (EDB-XXXXX) or GitHub Security Advisory ID (GHSA-XXXXX). Returns the matching CVE-ID with basic severity info. Use this when you have an EDB number or GHSA ID and need to find the corresponding CVE.",
                "inputSchema": {
                  "properties": {
                    "alt_id": {
                      "description": "Alternate ID (e.g. 'EDB-48537', 'GHSA-jfh8-c2jp-5v3q')",
                      "type": "string"
                    }
                  },
                  "required": [
                    "alt_id"
                  ],
                  "type": "object"
                },
                "name": "lookup_alt_id"
              },
              {
                "description": "Audit a technology stack for exploitable vulnerabilities. Accepts a comma-separated list of technologies (max 5) and searches for critical/ high severity CVEs with public exploits for each one, sorted by EPSS exploitation probability. Use this when a user describes their infrastructure and wants to know what to patch first. Example: technologies='nginx, postgresql, node.js' returns a risk-sorted list of exploitable CVEs grouped by technology. Rate-limit cost: each technology requires up to 2 API calls; 5 technologies counts as up to 10 calls toward your rate limit.",
                "inputSchema": {
                  "properties": {
                    "technologies": {
                      "description": "Comma-separated list of technologies (e.g. 'nginx, postgresql, node.js'). Max 5.",
                      "type": "string"
                    }
                  },
                  "required": [
                    "technologies"
                  ],
                  "type": "object"
                },
                "name": "audit_stack"
              },
              {
                "description": "Generate a pentest report finding in Markdown format for a specific vulnerability. Fetches full detail and formats it as a professional finding with severity, CVSS, description, affected products, exploit availability, and references. Accepts both CVE-IDs and EIP-IDs. Optionally include the target system tested and tester notes. The output is ready to paste into a pentest report. Example: cve_id='CVE-2024-3400', target='fw.corp.example.com', notes='Confirmed RCE via GlobalProtect gateway'.",
                "inputSchema": {
                  "properties": {
                    "cve_id": {
                      "description": "CVE or EIP identifier (e.g. 'CVE-2024-3400')",
                      "type": "string"
                    },
                    "notes": {
                      "description": "Tester notes to include in the finding. Optional.",
                      "type": "string"
                    },
                    "target": {
                      "description": "Target system tested (e.g. 'fw.corp.example.com'). Optional.",
                      "type": "string"
                    }
                  },
                  "required": [
                    "cve_id"
                  ],
                  "type": "object"
                },
                "name": "generate_finding"
              }
            ]
          }
        },
        "requested_protocol_version": "2025-03-26",
        "resumed": true,
        "session_id_present": true,
        "transport": "streamable-http",
        "url": "https://mcp.exploit-intel.com/mcp"
      },
      "latency_ms": 60.58,
      "status": "ok"
    },
    "step_up_auth_probe": {
      "details": {
        "auth_required_checks": [],
        "broad_scopes": [],
        "challenge_headers": [],
        "minimal_scope_documented": false,
        "oauth_present": false,
        "scope_specificity_ratio": 0.0,
        "step_up_signals": [],
        "supported_scopes": []
      },
      "latency_ms": null,
      "status": "missing"
    },
    "tool_snapshot_probe": {
      "details": {
        "reason": "no_tools"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "tools_list": {
      "details": {
        "error": "Client error '400 Bad Request' for url 'https://mcp.exploit-intel.com/mcp/'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
        "headers": {
          "content-type": "application/json",
          "strict-transport-security": "max-age=31536000; includeSubDomains"
        },
        "http_status": 400,
        "payload": {},
        "url": "https://mcp.exploit-intel.com/mcp"
      },
      "latency_ms": 71.16,
      "status": "error"
    },
    "transport_compliance_probe": {
      "details": {
        "bad_protocol_error": null,
        "bad_protocol_headers": {
          "content-type": "application/json",
          "strict-transport-security": "max-age=31536000; includeSubDomains"
        },
        "bad_protocol_payload": {
          "error": {
            "code": -32700,
            "message": "Invalid request"
          },
          "id": null,
          "jsonrpc": "2.0"
        },
        "bad_protocol_status_code": 400,
        "delete_error": null,
        "delete_status_code": 200,
        "expired_session_error": null,
        "expired_session_status_code": 404,
        "issues": [
          "missing_protocol_header"
        ],
        "last_event_id_visible": false,
        "protocol_header_present": false,
        "requested_protocol_version": "2025-03-26",
        "session_id_present": true,
        "transport": "streamable-http"
      },
      "latency_ms": 103.55,
      "status": "warning"
    },
    "utility_coverage_probe": {
      "details": {
        "completions": {
          "advertised": false,
          "live_probe": "not_executed",
          "sample_target": null
        },
        "initialize_capability_keys": [
          "experimental",
          "prompts",
          "tools"
        ],
        "pagination": {
          "metadata_signal": false,
          "next_cursor_methods": [],
          "supported": false
        },
        "tasks": {
          "advertised": false,
          "http_status": 400,
          "probe_status": "missing"
        }
      },
      "latency_ms": 49.32,
      "status": "missing"
    }
  },
  "failures": {
    "oauth_authorization_server": {
      "reason": "no_authorization_server"
    },
    "oauth_protected_resource": {
      "error": "Client error '404 Not Found' for url 'https://mcp.exploit-intel.com/.well-known/oauth-protected-resource'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
      "url": "https://mcp.exploit-intel.com/.well-known/oauth-protected-resource"
    },
    "openid_configuration": {
      "reason": "no_authorization_server"
    },
    "server_card": {
      "error": "Client error '404 Not Found' for url 'https://mcp.exploit-intel.com/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
      "url": "https://mcp.exploit-intel.com/.well-known/mcp/server-card.json"
    },
    "tools_list": {
      "error": "Client error '400 Bad Request' for url 'https://mcp.exploit-intel.com/mcp/'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
      "headers": {
        "content-type": "application/json",
        "strict-transport-security": "max-age=31536000; includeSubDomains"
      },
      "http_status": 400,
      "payload": {},
      "url": "https://mcp.exploit-intel.com/mcp"
    }
  },
  "remote_url": "https://mcp.exploit-intel.com/mcp",
  "server_card_payload": null,
  "server_identifier": "com.exploit-intel/eip-mcp"
}