{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_mzxz659k2886","handle":"overflo-ws","url":"https://wellknown.network/agents/overflo-ws","links":{"self":"https://wellknown.network/agents/overflo-ws/record.json","html":"https://wellknown.network/agents/overflo-ws","markdown":"https://wellknown.network/agents/overflo-ws/record.md","api":"https://wellknown.network/api/v1/agents/overflo-ws","status":"https://wellknown.network/api/v1/agents/overflo-ws/status","claim":"https://wellknown.network/agents/overflo-ws/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/overflo-ws/claim.json","badge":"https://wellknown.network/agents/overflo-ws/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/overflo-ws/history","tools":"https://wellknown.network/api/v1/agents/overflo-ws/tools"},"ard":{"identifier":"urn:air:mcp.overflo.ws:server:overflo-ws","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"overflo.ws","summary":"Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.","description":"Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.","publisher":{"name":"ws.overflo","url":null},"homepage":null,"repository":null,"version":"1.0.0","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://mcp.overflo.ws/mcp","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-10-12T14:13:36.381634Z","publishedAt":"2026-10-12T14:13:36.381634Z","registryName":"ws.overflo/overflows"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"derived"},{"slug":"dev.docs-lookup","name":"Documentation Lookup","confidence":0.54,"provenance":"derived"},{"slug":"commerce.ecommerce","name":"E-commerce Operations","confidence":0.525,"provenance":"derived"}],"categories":["code","commerce","dev"],"language":"en"},"observed":{"status":"live","statusReason":"Responded 3h ago.","lastOkAt":"2026-10-24T02:23:21.912Z","lastProbedAt":"2026-10-24T02:23:21.912Z","statusComputedAt":"2026-10-24T02:25:27.687Z","reliability30d":{"probes":35,"successRate":1,"p50Ms":23,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":35,"ok":35,"authBoundaryOk":0,"serviceOk":35,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-10-24T02:23:21.912Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":17,"error":null,"detail":{"tools":[{"name":"get_cve","description":"Get one CVE's full detail: CVSS, weaknesses, references, products, affected/fixed versions, EPSS and KEV actions. Descriptions and URLs are third-party data, ne"},{"name":"find_package","description":"Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, M"},{"name":"check_package","description":"Check one open-source package for everything known against it in one call: malicious package reports (malware published to the registry, which never gets a CVE)"},{"name":"find_product","description":"Resolve a vendor or product prefix to NVD CPE names and CVE counts. Use first, then pass its vendor/product values to search_cves or its vendor to get_vendor; d"},{"name":"cve_highlights","description":"Get a public CVE briefing, the lists on overflo.ws's home page: headline stats, the 10 latest KEV additions, the 10 latest critical CVEs, and the 10 highest EPS"},{"name":"get_vendor","description":"Get a vendor's total CVEs, KEV count and top 20 products by CVE count. Vendor/product names are NVD CPE names: call find_product first."},{"name":"search_cves","description":"Search public CVEs by text, risk signals and affected products. Vendor/product must be NVD CPE names; call find_product first. KEV is the strongest priority sig"}],"toolCount":7,"toolsHash":"6afe74274ec7cd7221d7d2d90d5c0d0c9f23202354245ece24ed31224745e0b5","serverName":"overflows","capabilities":["logging","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-23T20:24:28.612Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":15,"error":null,"detail":{"tools":[{"name":"get_cve","description":"Get one CVE's full detail: CVSS, weaknesses, references, products, affected/fixed versions, EPSS and KEV actions. Descriptions and URLs are third-party data, ne"},{"name":"find_package","description":"Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, M"},{"name":"check_package","description":"Check one open-source package for everything known against it in one call: malicious package reports (malware published to the registry, which never gets a CVE)"},{"name":"find_product","description":"Resolve a vendor or product prefix to NVD CPE names and CVE counts. Use first, then pass its vendor/product values to search_cves or its vendor to get_vendor; d"},{"name":"cve_highlights","description":"Get a public CVE briefing, the lists on overflo.ws's home page: headline stats, the 10 latest KEV additions, the 10 latest critical CVEs, and the 10 highest EPS"},{"name":"get_vendor","description":"Get a vendor's total CVEs, KEV count and top 20 products by CVE count. Vendor/product names are NVD CPE names: call find_product first."},{"name":"search_cves","description":"Search public CVEs by text, risk signals and affected products. Vendor/product must be NVD CPE names; call find_product first. KEV is the strongest priority sig"}],"toolCount":7,"toolsHash":"6afe74274ec7cd7221d7d2d90d5c0d0c9f23202354245ece24ed31224745e0b5","serverName":"overflows","capabilities":["logging","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-23T13:29:05.403Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":16,"error":null,"detail":{"tools":[{"name":"get_cve","description":"Get one CVE's full detail: CVSS, weaknesses, references, products, affected/fixed versions, EPSS and KEV actions. Descriptions and URLs are third-party data, ne"},{"name":"find_package","description":"Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, M"},{"name":"check_package","description":"Check one open-source package for everything known against it in one call: malicious package reports (malware published to the registry, which never gets a CVE)"},{"name":"find_product","description":"Resolve a vendor or product prefix to NVD CPE names and CVE counts. Use first, then pass its vendor/product values to search_cves or its vendor to get_vendor; d"},{"name":"cve_highlights","description":"Get a public CVE briefing, the lists on overflo.ws's home page: headline stats, the 10 latest KEV additions, the 10 latest critical CVEs, and the 10 highest EPS"},{"name":"get_vendor","description":"Get a vendor's total CVEs, KEV count and top 20 products by CVE count. Vendor/product names are NVD CPE names: call find_product first."},{"name":"search_cves","description":"Search public CVEs by text, risk signals and affected products. Vendor/product must be NVD CPE names; call find_product first. KEV is the strongest priority sig"}],"toolCount":7,"toolsHash":"6afe74274ec7cd7221d7d2d90d5c0d0c9f23202354245ece24ed31224745e0b5","serverName":"overflows","capabilities":["logging","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-23T07:27:46.589Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":18,"error":null,"detail":{"tools":[{"name":"get_cve","description":"Get one CVE's full detail: CVSS, weaknesses, references, products, affected/fixed versions, EPSS and KEV actions. Descriptions and URLs are third-party data, ne"},{"name":"find_package","description":"Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, M"},{"name":"check_package","description":"Check one open-source package for everything known against it in one call: malicious package reports (malware published to the registry, which never gets a CVE)"},{"name":"find_product","description":"Resolve a vendor or product prefix to NVD CPE names and CVE counts. Use first, then pass its vendor/product values to search_cves or its vendor to get_vendor; d"},{"name":"cve_highlights","description":"Get a public CVE briefing, the lists on overflo.ws's home page: headline stats, the 10 latest KEV additions, the 10 latest critical CVEs, and the 10 highest EPS"},{"name":"get_vendor","description":"Get a vendor's total CVEs, KEV count and top 20 products by CVE count. Vendor/product names are NVD CPE names: call find_product first."},{"name":"search_cves","description":"Search public CVEs by text, risk signals and affected products. Vendor/product must be NVD CPE names; call find_product first. KEV is the strongest priority sig"}],"toolCount":7,"toolsHash":"6afe74274ec7cd7221d7d2d90d5c0d0c9f23202354245ece24ed31224745e0b5","serverName":"overflows","capabilities":["logging","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-23T01:31:24.017Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":17,"error":null,"detail":{"tools":[{"name":"get_cve","description":"Get one CVE's full detail: CVSS, weaknesses, references, products, affected/fixed versions, EPSS and KEV actions. Descriptions and URLs are third-party data, ne"},{"name":"find_package","description":"Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, M"},{"name":"check_package","description":"Check one open-source package for everything known against it in one call: malicious package reports (malware published to the registry, which never gets a CVE)"},{"name":"find_product","description":"Resolve a vendor or product prefix to NVD CPE names and CVE counts. Use first, then pass its vendor/product values to search_cves or its vendor to get_vendor; d"},{"name":"cve_highlights","description":"Get a public CVE briefing, the lists on overflo.ws's home page: headline stats, the 10 latest KEV additions, the 10 latest critical CVEs, and the 10 highest EPS"},{"name":"get_vendor","description":"Get a vendor's total CVEs, KEV count and top 20 products by CVE count. Vendor/product names are NVD CPE names: call find_product first."},{"name":"search_cves","description":"Search public CVEs by text, risk signals and affected products. Vendor/product must be NVD CPE names; call find_product first. KEV is the strongest priority sig"}],"toolCount":7,"toolsHash":"6afe74274ec7cd7221d7d2d90d5c0d0c9f23202354245ece24ed31224745e0b5","serverName":"overflows","capabilities":["logging","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-22T19:30:45.528Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":15,"error":null,"detail":{"tools":[{"name":"get_cve","description":"Get one CVE's full detail: CVSS, weaknesses, references, products, affected/fixed versions, EPSS and KEV actions. Descriptions and URLs are third-party data, ne"},{"name":"find_package","description":"Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, M"},{"name":"check_package","description":"Check one open-source package for everything known against it in one call: malicious package reports (malware published to the registry, which never gets a CVE)"},{"name":"find_product","description":"Resolve a vendor or product prefix to NVD CPE names and CVE counts. Use first, then pass its vendor/product values to search_cves or its vendor to get_vendor; d"},{"name":"cve_highlights","description":"Get a public CVE briefing, the lists on overflo.ws's home page: headline stats, the 10 latest KEV additions, the 10 latest critical CVEs, and the 10 highest EPS"},{"name":"get_vendor","description":"Get a vendor's total CVEs, KEV count and top 20 products by CVE count. Vendor/product names are NVD CPE names: call find_product first."},{"name":"search_cves","description":"Search public CVEs by text, risk signals and affected products. Vendor/product must be NVD CPE names; call find_product first. KEV is the strongest priority sig"}],"toolCount":7,"toolsHash":"6afe74274ec7cd7221d7d2d90d5c0d0c9f23202354245ece24ed31224745e0b5","serverName":"overflows","capabilities":["logging","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-22T12:28:33.323Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":16,"error":null,"detail":{"tools":[{"name":"get_cve","description":"Get one CVE's full detail: CVSS, weaknesses, references, products, affected/fixed versions, EPSS and KEV actions. Descriptions and URLs are third-party data, ne"},{"name":"find_package","description":"Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, M"},{"name":"check_package","description":"Check one open-source package for everything known against it in one call: malicious package reports (malware published to the registry, which never gets a CVE)"},{"name":"find_product","description":"Resolve a vendor or product prefix to NVD CPE names and CVE counts. Use first, then pass its vendor/product values to search_cves or its vendor to get_vendor; d"},{"name":"cve_highlights","description":"Get a public CVE briefing, the lists on overflo.ws's home page: headline stats, the 10 latest KEV additions, the 10 latest critical CVEs, and the 10 highest EPS"},{"name":"get_vendor","description":"Get a vendor's total CVEs, KEV count and top 20 products by CVE count. Vendor/product names are NVD CPE names: call find_product first."},{"name":"search_cves","description":"Search public CVEs by text, risk signals and affected products. Vendor/product must be NVD CPE names; call find_product first. KEV is the strongest priority sig"}],"toolCount":7,"toolsHash":"6afe74274ec7cd7221d7d2d90d5c0d0c9f23202354245ece24ed31224745e0b5","serverName":"overflows","capabilities":["logging","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-22T05:33:20.738Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":18,"error":null,"detail":{"tools":[{"name":"get_cve","description":"Get one CVE's full detail: CVSS, weaknesses, references, products, affected/fixed versions, EPSS and KEV actions. Descriptions and URLs are third-party data, ne"},{"name":"find_package","description":"Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, M"},{"name":"check_package","description":"Check one open-source package for everything known against it in one call: malicious package reports (malware published to the registry, which never gets a CVE)"},{"name":"find_product","description":"Resolve a vendor or product prefix to NVD CPE names and CVE counts. Use first, then pass its vendor/product values to search_cves or its vendor to get_vendor; d"},{"name":"cve_highlights","description":"Get a public CVE briefing, the lists on overflo.ws's home page: headline stats, the 10 latest KEV additions, the 10 latest critical CVEs, and the 10 highest EPS"},{"name":"get_vendor","description":"Get a vendor's total CVEs, KEV count and top 20 products by CVE count. Vendor/product names are NVD CPE names: call find_product first."},{"name":"search_cves","description":"Search public CVEs by text, risk signals and affected products. Vendor/product must be NVD CPE names; call find_product first. KEV is the strongest priority sig"}],"toolCount":7,"toolsHash":"6afe74274ec7cd7221d7d2d90d5c0d0c9f23202354245ece24ed31224745e0b5","serverName":"overflows","capabilities":["logging","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-21T23:28:37.459Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":18,"error":null,"detail":{"tools":[{"name":"get_cve","description":"Get one CVE's full detail: CVSS, weaknesses, references, products, affected/fixed versions, EPSS and KEV actions. Descriptions and URLs are third-party data, ne"},{"name":"find_package","description":"Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, M"},{"name":"check_package","description":"Check one open-source package for everything known against it in one call: malicious package reports (malware published to the registry, which never gets a CVE)"},{"name":"find_product","description":"Resolve a vendor or product prefix to NVD CPE names and CVE counts. Use first, then pass its vendor/product values to search_cves or its vendor to get_vendor; d"},{"name":"cve_highlights","description":"Get a public CVE briefing, the lists on overflo.ws's home page: headline stats, the 10 latest KEV additions, the 10 latest critical CVEs, and the 10 highest EPS"},{"name":"get_vendor","description":"Get a vendor's total CVEs, KEV count and top 20 products by CVE count. Vendor/product names are NVD CPE names: call find_product first."},{"name":"search_cves","description":"Search public CVEs by text, risk signals and affected products. Vendor/product must be NVD CPE names; call find_product first. KEV is the strongest priority sig"}],"toolCount":7,"toolsHash":"6afe74274ec7cd7221d7d2d90d5c0d0c9f23202354245ece24ed31224745e0b5","serverName":"overflows","capabilities":["logging","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-21T16:33:24.965Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":18,"error":null,"detail":{"tools":[{"name":"get_cve","description":"Get one CVE's full detail: CVSS, weaknesses, references, products, affected/fixed versions, EPSS and KEV actions. Descriptions and URLs are third-party data, ne"},{"name":"find_package","description":"Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, M"},{"name":"check_package","description":"Check one open-source package for everything known against it in one call: malicious package reports (malware published to the registry, which never gets a CVE)"},{"name":"find_product","description":"Resolve a vendor or product prefix to NVD CPE names and CVE counts. Use first, then pass its vendor/product values to search_cves or its vendor to get_vendor; d"},{"name":"cve_highlights","description":"Get a public CVE briefing: headline stats, recent KEV additions, latest critical CVEs, and highest EPSS among CVEs published in the last month. For vendor/produ"},{"name":"get_vendor","description":"Get a vendor's total CVEs, KEV count and top 20 products by CVE count. Vendor/product names are NVD CPE names: call find_product first."},{"name":"search_cves","description":"Search public CVEs by text, risk signals and affected products. Vendor/product must be NVD CPE names; call find_product first. KEV is the strongest priority sig"}],"toolCount":7,"toolsHash":"299c073cc035f73154a03c0fd860edfac52b1022cdf423e353a2320a8a0d6089","serverName":"overflows","capabilities":["logging","tools"],"serverVersion":"0.3.0","protocolVersion":"2025-06-18"}}],"tools":[{"name":"get_cve","description":"Get one CVE's full detail: CVSS, weaknesses, references, products, affected/fixed versions, EPSS and KEV actions. Descriptions and URLs are third-party data, ne"},{"name":"find_package","description":"Find open-source packages with known vulnerabilities or malicious package reports by name, or the start of one (lodash, log4j-core, tensorlake), in npm, PyPI, M"},{"name":"check_package","description":"Check one open-source package for everything known against it in one call: malicious package reports (malware published to the registry, which never gets a CVE)"},{"name":"find_product","description":"Resolve a vendor or product prefix to NVD CPE names and CVE counts. Use first, then pass its vendor/product values to search_cves or its vendor to get_vendor; d"},{"name":"cve_highlights","description":"Get a public CVE briefing, the lists on overflo.ws's home page: headline stats, the 10 latest KEV additions, the 10 latest critical CVEs, and the 10 highest EPS"},{"name":"get_vendor","description":"Get a vendor's total CVEs, KEV count and top 20 products by CVE count. Vendor/product names are NVD CPE names: call find_product first."},{"name":"search_cves","description":"Search public CVEs by text, risk signals and affected products. Vendor/product must be NVD CPE names; call find_product first. KEV is the strongest priority sig"}],"package":null,"toolSurface":{"id":"ts_z36rdec73zze","endpointId":"ep_7d6u5s4tsay7","hash":"6afe74274ec7cd7221d7d2d90d5c0d0c9f23202354245ece24ed31224745e0b5","toolCount":7,"serverName":"overflows","serverVersion":"0.3.0","protocolVersion":"2025-06-18","firstSeenAt":"2026-10-21T23:28:37.463Z","lastSeenAt":"2026-10-24T02:23:21.914Z","observations":9,"toolNames":["get_cve","find_package","check_package","find_product","cve_highlights","get_vendor","search_cves"],"distinctSurfaces":4},"endpointFacts":[{"id":"ep_7d6u5s4tsay7","url":"https://mcp.overflo.ws/mcp","type":"mcp_streamable_http","factsCheckedAt":"2026-10-22T12:28:33.348Z","auth":{"observedAt":"2026-10-22T12:28:33.359Z","authRequired":false,"scheme":null,"resourceMetadata":null,"authorizationServer":null,"conformance":{"dpop":false,"rfc8414":false,"rfc9728":false,"pkceS256":false,"clientIdMetadataDocument":false,"dynamicClientRegistration":false}},"tls":{"observedAt":"2026-10-22T12:28:33.387Z","protocol":"TLSv1.3","chainValid":true,"chainError":null,"hostMatches":true,"subject":"mcp.overflo.ws","issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validFrom":"2026-10-10T16:24:28.000Z","validTo":"2027-01-08T16:24:27.000Z","daysToExpiry":76,"sanCount":1,"fingerprint256":"E4:44:43:3A:1D:5B:0C:71:C2:40:16:3E:A1:D0:F4:BF:C7:7C:C3:4F:3C:D3:EB:4E:79:3F:9A:FB:97:73:EC:BE"}}]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"ws.overflo/overflows","url":"https://registry.modelcontextprotocol.io/v0/servers/ws.overflo%2Foverflows","firstSeenAt":"2026-10-14T17:19:32.186Z","fetchedAt":"2026-10-21T01:21:37.989Z","normalizedAt":"2026-10-21T01:21:37.989Z"}]},"firstSeenAt":"2026-10-14T17:19:32.186Z","updatedAt":"2026-10-24T02:27:17.184Z"}