activelyExploited

MCP tool from Attestd MCP by attestd-io

CISA KEV signal

How to use it

activelyExploited is exposed by the Attestd MCP MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the activelyExploited tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

FULL ATTESTD MCP LISTING

Other tools in Attestd MCP (26)

affectedProducts

Attestd product slugs affected by this CVE

authenticationRequired

true only when all matching CVEs require authentication

check_batch_vulnerabilities

check_package_vulnerability

Synthesis confidence 0.0–1.0

Number of bundled infrastructure products

string

CVE identifier

CVE IDs contributing to the risk assessment

CVE infrastructure slugs with display names

NVD description text

true when the CVE is in Attestd's database; false on 404 (not an error)

get_cve_details

array

list_covered_products

No arguments. With an API key, returns live JSON from GET /v1/products:

Explanation when outsideCoverage is true

outsideCoverage

true if the product is not covered. Unknown risk, not safe.

string

Array of { slug, display } entries

remoteExploitable

true if any matching CVE is remotely exploitable

critical \

"live" when fetched from the API

supplyChainPackages

Monitored PyPI/npm packages

Combined count of CVE products and supply chain packages

Package name integrity: typosquat or AI-hallucinated name (kind, resembles, likelyintended)

string