Categories › Web & Browser › Web search engines & search APIs
Vulnerability records: CVE, GHSA, CISA KEV, EPSS and vendor fixes in one place. No key needed.
Remote server: your requests and data go to threatist.io. Claude Code: claude mcp add --transport http threatist https://threatist.io/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
get_advisory — A Red Hat RHSA or Microsoft KB or ADV with its CVEs and records.get_vendor — A vendor's records, highest priority first. Takes the same filters as search_vulnerabilities.get_vulnerability — A record for a TI id or an alias such as a CVE or GHSA id. Merged ids give the surviving record. By default the record is shortened: no CPE list_exploited — Recent additions to CISA's Known Exploited Vulnerabilities catalogue. Newest first, each with its Threatist record.search_vulnerabilities — Records matching a text and filters, a page at a time. Pass next as cursor for the next page.Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.