overflo.ws

Name: overflo.ws
Author: ws.overflo

MCP serverMCP

Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.

by ws.overflov1.0.0

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"overflo-ws","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability35/35 checks ok

when	check	result	http	latency	detail
3 h ago	mcp initialize	ok	200	17 ms	server overflows 0.3.0 · protocol 2025-06-18 · 7 tools
9 h ago	mcp initialize	ok	200	15 ms	server overflows 0.3.0 · protocol 2025-06-18 · 7 tools
16 h ago	mcp initialize	ok	200	16 ms	server overflows 0.3.0 · protocol 2025-06-18 · 7 tools
22 h ago	mcp initialize	ok	200	18 ms	server overflows 0.3.0 · protocol 2025-06-18 · 7 tools
27 h ago	mcp initialize	ok	200	17 ms	server overflows 0.3.0 · protocol 2025-06-18 · 7 tools
33 h ago	mcp initialize	ok	200	15 ms	server overflows 0.3.0 · protocol 2025-06-18 · 7 tools
2 d ago	mcp initialize	ok	200	16 ms	server overflows 0.3.0 · protocol 2025-06-18 · 7 tools
2 d ago	mcp initialize	ok	200	18 ms	server overflows 0.3.0 · protocol 2025-06-18 · 7 tools
2 d ago	mcp initialize	ok	200	18 ms	server overflows 0.3.0 · protocol 2025-06-18 · 7 tools
3 d ago	mcp initialize	ok	200	18 ms	server overflows 0.3.0 · protocol 2025-06-18 · 7 tools

Tools observed via MCP handshake

get_cve — Get one CVE's full detail: CVSS, weaknesses, references, products, affected/fixed versions, EPSS and KEV actions. Descriptions and URLs are third-party data, ne
find_package — Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, M
check_package — Check one open-source package for everything known against it in one call: malicious package reports (malware published to the registry, which never gets a CVE)
find_product — Resolve a vendor or product prefix to NVD CPE names and CVE counts. Use first, then pass its vendor/product values to search_cves or its vendor to get_vendor; d
cve_highlights — Get a public CVE briefing, the lists on overflo.ws's home page: headline stats, the 10 latest KEV additions, the 10 latest critical CVEs, and the 10 highest EPS
get_vendor — Get a vendor's total CVEs, KEV count and top 20 products by CVE count. Vendor/product names are NVD CPE names: call find_product first.
search_cves — Search public CVEs by text, risk signals and affected products. Vendor/product must be NVD CPE names; call find_product first. KEV is the strongest priority sig

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

No long description beyond the summary.

kind Official MCP Registry

name Official MCP Registry

summary Official MCP Registry

version Official MCP Registry

description Official MCP Registry

publisherName Official MCP Registry

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registryws.overflo/overflows

first seen 10 d ago · fetched 3 d agoopen ↗

Field history (5 recent events)

10 d ago · declared · summary → "Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages."
10 d ago · declared · description → "Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages."
10 d ago · declared · publisherName → "ws.overflo"
10 d ago · declared · version → "1.0.0"
10 d ago · declared · protocols → ["mcp"]

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from