threat_headlines
Live security-news headlines (RSS).
How to use it
Project documentation lists threat_headlines for the Cveasy MCP MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), then check which tools your installed version makes available. Tool availability can depend on configuration and credentials. A server handshake does not verify this tool’s behavior. See the full listing for setup details.
Install Cveasy MCP
/Users/<you>/.bun/bin/bun run /absolute/path/to/cveasy-mcp/src/index.tsOther tools in Cveasy MCP (39)
Search BAS findings (severity/module/MITRE/CVE/scan; carries validation verdicts).
MITRE ATT&CK coverage matrix.
Findings for a scan.
One scan's status/progress (poll after starting).
Launch a BAS scan (target must be within an active authorization scope).
List attack-simulation scans.
Aggregate BAS stats.
Targeted scan to confirm a CVE's exploitability.
Attach asset-criticality / data-classification / impact to a CVE.
Whether a fixed version actually exists: available / mitigation-only / not documented.
Whether a CVE is BAS-confirmed exploitable in this environment.
Assets affected by a given CVE (blast radius).
Scanner-side asset statistics.
Per-host finding concentration; explicit "no scanner data" status rather than misleading zeros.
One asset's detail + its CVEs.
Canonical assets with criticality/OS/risk.
Asset counts by criticality / scan coverage.
KEV counts, each with its stated denominator.
Org name/industry + settings (compliance frameworks, AI provider).
Remediation burndown / velocity over time.
Control coverage for a named framework (pci-dss, hipaa, …).
Backend reachability + AI runtime / BASzy status. Call first if things fail.
Full Command Center metric bundle.
Headline risk metrics + band distribution — best source of grounded numbers.
Global counts (CVEs, assets, scans).
Render the backend's own HTML/PDF report (local-model narrative) and save it.
The recommended section skeleton per report type (for reportrender).
List the report types CVEasy can produce.
Import scan findings into the estate (mutates the shared estate — isolated per-client instances only).
Reveal a saved file in Finder.
Workspaces on this install, with the slug to pass as tenant.
Known actors, sectors, CVEs, TTPs.
Curated briefings (filter by category/severity).
Board feed: top-exploitable, recent KEV, briefings, IoC stats, headlines.
The pinnable tool manifest and pin status (Secure MCP control (a)).
The triage work queue (filter by status/CVE).
Aggregate triage counts.
TRIS priority snapshot across a set of CVEs (bands + tally).