Cveasy MCP
未认领MCP server for CVEasy AI — connect Claude Desktop & Claude Code to your live CVEasy install. Thin client over the CVEasy REST API.
安装
/Users/<you>/.bun/bin/bun run /absolute/path/to/cveasy-mcp/src/index.ts更多Security服务器
浏览完整目录安全概况
已认领和已认证的服务器每周接受一次静态扫描，显示代码能触及的范围（外部服务、环境变量、shell 命令、代理配置目录）以及带有已知公告的依赖。认领此列表即可获得。 安全概况的工作原理
40 个工具中显示 40 个
文档中列出的工具 (40)
内容来自项目文档。服务器握手不会验证每个工具的说明或行为。
bas_findings_search
Search BAS findings (severity/module/MITRE/CVE/scan; carries validation verdicts).
bas_mitre_coverage
MITRE ATT&CK coverage matrix.
bas_scan_findings
Findings for a scan.
bas_scan_get
One scan's status/progress (poll after starting).
bas_scan_start
Launch a BAS scan (target must be within an active authorization scope).
bas_scans_list
List attack-simulation scans.
bas_stats
Aggregate BAS stats.
bas_validate_cve
Targeted scan to confirm a CVE's exploitability.
business_context_set
Attach asset-criticality / data-classification / impact to a CVE.
cve_fix_availability
Whether a fixed version actually exists: available / mitigation-only / not documented.
cve_validation_status
Whether a CVE is BAS-confirmed exploitable in this environment.
CVEs
inventory_affected_by_cve
Assets affected by a given CVE (blast radius).
inventory_asset_stats
Scanner-side asset statistics.
inventory_concentration
Per-host finding concentration; explicit "no scanner data" status rather than misleading zeros.
inventory_get
One asset's detail + its CVEs.
inventory_list
Canonical assets with criticality/OS/risk.
inventory_stats
Asset counts by criticality / scan coverage.
kev_context
KEV counts, each with its stated denominator.
org_profile
Org name/industry + settings (compliance frameworks, AI provider).
posture_burndown
Remediation burndown / velocity over time.
posture_compliance
Control coverage for a named framework (pci-dss, hipaa, …).
posture_health
Backend reachability + AI runtime / BASzy status. Call first if things fail.
posture_metrics_dashboard
Full Command Center metric bundle.
posture_metrics_summary
Headline risk metrics + band distribution — best source of grounded numbers.
posture_stats
Global counts (CVEs, assets, scans).
report_generate
Render the backend's own HTML/PDF report (local-model narrative) and save it.
report_template_guide
The recommended section skeleton per report type (for reportrender).
report_types
List the report types CVEasy can produce.
scan_import
Import scan findings into the estate (mutates the shared estate — isolated per-client instances only).
system_open_file
Reveal a saved file in Finder.
tenant_list
Workspaces on this install, with the slug to pass as tenant.
threat_actors
Known actors, sectors, CVEs, TTPs.
threat_briefings
Curated briefings (filter by category/severity).
threat_feed
Board feed: top-exploitable, recent KEV, briefings, IoC stats, headlines.
threat_headlines
Live security-news headlines (RSS).
tool_manifest
The pinnable tool manifest and pin status (Secure MCP control (a)).
triage_list
The triage work queue (filter by status/CVE).
triage_stats
Aggregate triage counts.
tris_snapshot
TRIS priority snapshot across a set of CVEs (bands + tally).