Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Changed the definition of "audit_dependencies", "cve_lookup", "epss_score" and 2 more
⟨7 unchanged words⟩ ,"packages_unverified":{},"packages_with_vulnerabilities":{},"provenance":{"description":"Where this answer came from. served_at is when Datakoot answered (UTC); upstream lists the official sources consulted. Datakoot may serve a briefly cached copy, so the source's own observation can be older than served_at.","properties":{"may_be_cached":{"type":"boolean"},"publisher":{"type":"string"},"served_at":{"format":"date-time","type":"string"},"upstream":{"items":{"type":"string"},"type":"array"}},"type":"object"},"source":{},"total_vulnerabilities":{},"verdict" ⟨2 unchanged words⟩
⟨8 unchanged words⟩ ,"known_exploited":{},"last_modified":{},"provenance":{"description":"Where this answer came from. served_at is when Datakoot answered (UTC); upstream lists the official sources consulted. Datakoot may serve a briefly cached copy, so the source's own observation can be older than served_at.","properties":{"may_be_cached":{"type":"boolean"},"publisher":{"type":"string"},"served_at":{"format":"date-time","type":"string"},"upstream":{"items":{"type":"string"},"type":"array"}},"type":"object"},"published":{},"references":{},"sources" ⟨3 unchanged words⟩
⟨4 unchanged words⟩ ,"model":{},"note":{},"provenance":{"description":"Where this answer came from. served_at is when Datakoot answered (UTC); upstream lists the official sources consulted. Datakoot may serve a briefly cached copy, so the source's own observation can be older than served_at.","properties":{"may_be_cached":{"type":"boolean"},"publisher":{"type":"string"},"served_at":{"format":"date-time","type":"string"},"upstream":{"items":{"type":"string"},"type":"array"}},"type":"object"},"scored":{},"scores":{},"source" ⟨2 unchanged words⟩
⟨11 unchanged words⟩ ,"name":{},"product":{},"provenance":{"description":"Where this answer came from. served_at is when Datakoot answered (UTC); upstream lists the official sources consulted. Datakoot may serve a briefly cached copy, so the source's own observation can be older than served_at.","properties":{"may_be_cached":{"type":"boolean"},"publisher":{"type":"string"},"served_at":{"format":"date-time","type":"string"},"upstream":{"items":{"type":"string"},"type":"array"}},"type":"object"},"released":{},"required_action":{},"returned" ⟨5 unchanged words⟩
⟨3 unchanged words⟩ {"ecosystem":{},"name":{},"provenance":{"description":"Where this answer came from. served_at is when Datakoot answered (UTC); upstream lists the official sources consulted. Datakoot may serve a briefly cached copy, so the source's own observation can be older than served_at.","properties":{"may_be_cached":{"type":"boolean"},"publisher":{"type":"string"},"served_at":{"format":"date-time","type":"string"},"upstream":{"items":{"type":"string"},"type":"array"}},"type":"object"},"source":{},"version":{},"vulnerabilities" ⟨3 unchanged words⟩
Changed the definition of "audit_dependencies", "cve_lookup", "epss_score" and 2 more
⟨10 unchanged words⟩ :"array"},"ecosystem":{"description":"DefaultPackage registry for the dependencies: npm (default), pypi, cargo, go, maven, rubygems, nuget, composer, pub, or hex.","type":"string"},"manifest":{ ⟨9 unchanged words⟩
before
—after
{"additionalProperties":true,"properties":{"ecosystem":{},"findings":{},"packages_audited":{},"packages_not_found":{},"packages_unverified":{},"packages_with_vulnerabilities":{},"source":{},"total_vulnerabilities":{},"verdict":{}},"type":"object"}Changed the definition of "audit_dependencies", "cve_lookup", "epss_score" and 2 more
before
—after
Audit Dependenciesbefore
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":true,"readOnlyHint":true,"title":"Audit Dependencies"}before
—CVE Lookup
Certificate changed, valid to 2026-12-22
Added "epss_score" and "known_exploited"; changed the definition of "cve_lookup" (3 tools before, 5 now)
⟨15 unchanged words⟩ severity, vector, CWE weakness, publish date, references — plus whether it is on the CISA Known-Exploited list (actively exploited in the wild) andreferences.itsSourceEPSS exploit-probability. Sources: NVD (NIST)., CISA KEV, FIRST EPSS.
Get the EPSS exploit-probability score (0-1) and percentile for one or more CVEs — the likelihood each is exploited in the next 30 days. Use it to prioritize patching. Pass cve_id for one, or cve_ids (array or comma-separated) for many. Source: FIRST.org EPSS.
Certificate recorded, valid to 2026-10-24
Authorization not required
First tool surface recorded: 3 tools (server version 2.0.0)
Showing the latest 8 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed
{"properties":{"cve_id":{"description":"CVE identifier, e.g. CVE-2021-44228 (case-insensitive; a bare 2021-44228 also works).","type":"string"}},"required": ⟨3 unchanged words⟩
before
—after
{"additionalProperties":true,"properties":{"cvss":{},"cwe":{},"description":{},"exploit_probability":{},"id":{},"known_exploited":{},"last_modified":{},"published":{},"references":{},"sources":{},"status":{}},"type":"object"}before
—after
{"additionalProperties":true,"properties":{"as_of":{},"model":{},"note":{},"scored":{},"scores":{},"source":{}},"type":"object"}before
—after
{"additionalProperties":true,"properties":{"catalog_count":{},"catalog_version":{},"cve_id":{},"date_added":{},"due_date":{},"filter":{},"known_ransomware_use":{},"listed":{},"name":{},"product":{},"released":{},"required_action":{},"returned":{},"source":{},"vendor":{},"vulnerabilities":{}},"type":"object"}before
—after
{"additionalProperties":true,"properties":{"ecosystem":{},"name":{},"source":{},"version":{},"vulnerabilities":{},"vulnerability_count":{}},"type":"object"}before
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":true,"readOnlyHint":true,"title":"CVE Lookup"}before
—after
EPSS Scorebefore
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":true,"readOnlyHint":true,"title":"EPSS Score"}before
—after
Known Exploitedbefore
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":true,"readOnlyHint":true,"title":"Known Exploited"}before
—after
Package Vulnerabilitiesbefore
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":true,"readOnlyHint":true,"title":"Package Vulnerabilities"}Check whether a CVE is on the CISA Known Exploited Vulnerabilities (KEV) catalog — confirmed exploited in the wild — or list the most recently added exploited vulnerabilities. Pass cve_id to check one; omit it to list recent (optionally filter by vendor/product, or ransomware_only). Source: CISA KEV, updated ~daily.