EchelonGraph CVE & Exposure

Name: EchelonGraph CVE & Exposure
Author: io.echelongraph

MCP serverMCP

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

by io.echelongraphrepository ↗homepage ↗v2.7.1MIT

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"echelongraph-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability13/13 checks ok

30 days ago

when	check	result	http	latency	detail
2 h ago	mcp initialize	ok	200	182 ms	server echelongraph-mcp 2.7.1 · protocol 2025-06-18 · 16 tools
8 h ago	mcp initialize	ok	200	161 ms	server echelongraph-mcp 2.7.1 · protocol 2025-06-18 · 16 tools
14 h ago	mcp initialize	ok	200	220 ms	server echelongraph-mcp 2.7.1 · protocol 2025-06-18 · 16 tools
20 h ago	mcp initialize	ok	200	172 ms	server echelongraph-mcp 2.7.1 · protocol 2025-06-18 · 16 tools
26 h ago	mcp initialize	ok	200	190 ms	server echelongraph-mcp 2.7.1 · protocol 2025-06-18 · 16 tools
33 h ago	mcp initialize	ok	200	203 ms	server echelongraph-mcp 2.7.1 · protocol 2025-06-18 · 16 tools
2 d ago	mcp initialize	ok	200	204 ms	server echelongraph-mcp 2.7.1 · protocol 2025-06-18 · 16 tools
2 d ago	mcp initialize	ok	200	267 ms	server echelongraph-mcp 2.7.1 · protocol 2025-06-18 · 16 tools
2 d ago	mcp initialize	ok	200	198 ms	server echelongraph-mcp 2.7.1 · protocol 2025-06-18 · 16 tools
2 d ago	mcp initialize	ok	200	227 ms	server echelongraph-mcp 2.7.1 · protocol 2025-06-18 · 16 tools

Tools observed via MCP handshake

cve_summary — Summary of EchelonGraph's CVE Pulse feed: summary.total active CVEs, their counts by severity band (summary.critical, summary.high, summary.medium, summary.low)
search_cves — Search/list CVEs from EchelonGraph's CVE feed (NVD + MITRE-CNA pre-NVD + CISA-KEV + EPSS + GitHub GHSA, each polled on a schedule). Filter by severity, minimum
get_cve — One CVE's record: description, severity, cvss_v3_score, cvss_v4_score and cvss_v4_severity, echelongraph_score, echelongraph_severity and score_confidence, epss
cve_exposure — Internet-exposure footprint for one CVE from EchelonGraph's KEV-exposure radar: how many internet-facing services (distinct ip:port, returned as exposed_hosts;
exposure_radar — Aggregate totals from EchelonGraph's internet-exposure radars: kev_exposure, internet-facing services running actively-exploited (CISA-KEV) CVEs, plus the ranso
kev_recent — The CVEs CISA has added to its Known Exploited Vulnerabilities (KEV) catalog, newest first, from EchelonGraph's copy of that catalog, which polls CISA's feed ev
epss_history — How one CVE's EPSS score (FIRST's exploit-prediction probability, 0 to 1, with its percentile) has changed, as EchelonGraph recorded it: points, oldest first, e
check_affected — Whether a product or package at a given version is affected by known CVEs, from the same matcher as echelongraph.io/am-i-affected. The CPE path takes product (a
check_sbom — Check a dependency list against EchelonGraph's advisory corpus, one verdict per component. For container images and Kubernetes pods, the input is an SBOM of eac
scan_manifest — Check a project's lockfile or pinned manifest against EchelonGraph's advisory corpus, one verdict per dependency. Pass files: 1 to 20 of filename and content, u
cve_intel — Weakness, public exploit code, affected packages and fixed versions for one CVE, from EchelonGraph's per-CVE enrichment. Returns cwes (each cwe_id with name and
cve_remediation — How one CVE is fixed, as its sources state it, in one answer. Every text is relayed as stated by its source; EchelonGraph has not tested it. An empty list or a
get_cwe — One CWE (weakness class) and the CVEs classified under it. Returns cwe_id, name and description (from the MITRE CWE catalog EchelonGraph embeds, version catalog
vendor_advisories_for_cve — The vendor-published advisories that name one CVE, newest first, at most 20: for each, vendor, vendor_display_name, vendor_advisory_id, title, severity and cvss
get_vendor_advisory — One vendor advisory in full, by vendor and the vendor's advisory ID (the vendor and vendor_advisory_id of a vendor advisory row): title, description, severity,
search_vendor_advisories — Search or list vendor-published advisories, newest first. A query of 3 or more characters is matched case-insensitively as a substring of each advisory's title,

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

No long description beyond the summary.

mcpmcp-servermodel-context-protocolcvevulnerabilityvulnerabilitiessecuritycybersecuritykevcisa-kevepssnvdghsacwecvsssbomlockfilescasecurity-advisoriesthreat-intelligenceexposureechelongraphclaudecursor

kind Official MCP Registry

name Official MCP Registry

license npm registry

repoUrl Official MCP Registry

summary Official MCP Registry

version Official MCP Registry

description Official MCP Registry

homepageUrl Official MCP Registry

publisherName Official MCP Registry

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

npm registryechelongraph-mcp

first seen 11 d ago · fetched 4 h agoopen ↗

Official MCP Registryio.echelongraph/echelongraph-mcp

first seen 6 d ago · fetched 8 h agoopen ↗

Field history (12 recent events)

3 d ago · declared · summary → "CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless."
3 d ago · declared · description → "CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless."
3 d ago · declared · version → "2.7.1"
3 d ago · observed · packageFacts → {"name":"echelongraph-mcp","registry":"npm","publishedAt":"2026-10-06T11:34:58.085Z","latestVersion":"2.7.1","weeklyDown
4 d ago · observed · packageFacts → {"name":"echelongraph-mcp","registry":"npm","publishedAt":"2026-10-06T01:11:37.824Z","latestVersion":"2.7.0","weeklyDown
4 d ago · observed · packageFacts → {"name":"echelongraph-mcp","registry":"npm","publishedAt":"2026-10-05T14:38:47.873Z","latestVersion":"2.6.8","weeklyDown
5 d ago · observed · packageFacts → {"name":"echelongraph-mcp","registry":"npm","publishedAt":"2026-10-05T02:06:32.158Z","latestVersion":"2.6.5","weeklyDown
5 d ago · observed · packageFacts → {"name":"echelongraph-mcp","registry":"npm","publishedAt":"2026-10-04T11:32:10.628Z","latestVersion":"2.6.3","weeklyDown
6 d ago · observed · packageFacts → {"name":"echelongraph-mcp","registry":"npm","publishedAt":"2026-10-04T05:01:59.022Z","latestVersion":"2.6.1","weeklyDown
6 d ago · declared · repoUrl → "https://github.com/echelongraph/echelongraph-mcp"
6 d ago · declared · description → "CVEs (NVD, CISA-KEV, EPSS, GHSA) and per-CVE exposure from Shodan data (© Shodan). Free, keyless."
6 d ago · declared · summary → "CVEs (NVD, CISA-KEV, EPSS, GHSA) and per-CVE exposure from Shodan data (© Shodan). Free, keyless."

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from