sectora

Name: sectora
Author: megabrainee

MCP serverMCP

Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.

by megabraineerepository ↗homepage ↗v1.1.0

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"sectora","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability4/4 checks ok

30 days ago

when	check	result	http	latency	detail
7 h ago	mcp initialize	ok	200	29 ms	server sectora-mcp-server 1.0.0 · protocol 2025-03-26 · 14 tools
14 h ago	mcp initialize	ok	200	40 ms	server sectora-mcp-server 1.0.0 · protocol 2025-03-26 · 14 tools
21 h ago	mcp initialize	ok	200	21 ms	server sectora-mcp-server 1.0.0 · protocol 2025-03-26 · 14 tools
27 h ago	mcp initialize	ok	200	34 ms	server sectora-mcp-server 1.0.0 · protocol 2025-03-26 · 14 tools
35 h ago	mcp initialize	ok	200	25 ms	server sectora-mcp-server 1.0.0 · protocol 2025-03-26 · 14 tools

Tools observed via MCP handshake

lookup_cve — Get full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input
assess_tech_risk — Assess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names o
search_cves — Search for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.
get_kev_recent — Get recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.
get_trending_cves — Get currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.
get_weaponization_score — Get the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.
lookup_ip_reputation — Look up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Accepts IPv4 or IPv6 (the Shield network sees bot
get_threat_stats — Get statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.
list_my_findings — List the API key owner's open security findings across all scans. Use this to answer "what's my current exposure?" Filter by severity, status, or domain. Return
list_my_scans — List the API key owner's recent scans with summary counts. Requires API key.
get_scan — Get a scan with all its findings (full detail: title, description, evidence, remediation, CVSS). Requires API key.
scan_url — Kick off a DAST security scan against a public URL the API key owner controls. Two-step flow: first call returns a preview (target, profile, ETA, quota remainin
get_my_posture — Get Shield WAF posture score and breakdown for a domain registered under this account. Returns 0-100 score, letter grade, per-component breakdown (origin lock,
assess_dependency — Check a single package@version for known vulnerabilities via OSV.dev (npm, PyPI, Go, Maven, NuGet, RubyGems, Packagist, crates.io, etc.). Returns advisories wit

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

No long description beyond the summary.

kind ← Official MCP Registry

name ← Official MCP Registry

repoUrl ← Official MCP Registry

summary ← Official MCP Registry

version ← Official MCP Registry

description ← Official MCP Registry

homepageUrl ← Official MCP Registry

publisherName ← Official MCP Registry

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registryio.github.megabrainee/sectora

first seen 2 d ago · fetched 2 d agoopen ↗

Field history (7 recent events)

2 d ago · declared · summary → "Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST."
2 d ago · declared · description → "Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST."
2 d ago · declared · publisherName → "megabrainee"
2 d ago · declared · homepageUrl → "https://sectora.io/mcp"
2 d ago · declared · repoUrl → "https://github.com/BraineeTech/sectora"
2 d ago · declared · version → "1.1.0"
2 d ago · declared · protocols → ["mcp"]

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from