Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Authorization not required
Added "stackfacts_tz_lookup" (40 tools before, 41 now)
Get an IANA time zone (Europe/Berlin) or alias: current UTC offset, abbreviation, DST summary and backward-compatible names from tzdata.
Certificate recorded, valid to 2027-01-04
Authorization not required
Added "stackfacts_bcp47_lookup", "stackfacts_capec_lookup", "stackfacts_control_lookup" and 2 more; changed the definition of "stackfacts_cve_lookup", "stackfacts_cve_prioritize", "stackfacts_cve_search" and 3 more (35 tools before, 40 now)
Get any CVE: CISA KEV entry,EPSS score,CVSS score and patch priority, plus every OSV ⟨10 unchanged words⟩
⟨3 unchanged words⟩ id":{"description":"CVE id, e.g.CVE-2021-44228CVE-2021-44228. Loose ids such as cve 2021 44228 or cve_2021_44228 are accepted.","maxLength":32,"pattern":"^^\\s*[Cc][Vv][Ee]-\\d[\\s_\\u2010-\\u2015\\u2212-]*\\d{4}-\\d(?:[\\s_\\u2010-\\u2015\\u2212-]+\\d
Unknown → Live
First tool surface recorded: 35 tools (server version 0.6.0)
https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp (mcp_streamable_http) — from mcp_registry, with the record
Showing the latest 8 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed
⟨6 unchanged words⟩ 100 CVEs by CISA KEV status, thenFIRST EPSS exploit probability scoreCVSSandbasepercentile.score.
⟨12 unchanged words⟩ (not all of NVD), with KEV status, EPSS score,and CVSS v3 where an OSV advisory has one.
Check npm or PyPI purl lists:versionorchangesraw lockfiles: upgrades judged on advisories, KEV, licence; same version, other hash = hash_mismatch. Returns go, reviewor, no_go.
⟨70 unchanged words⟩ "minItems":0,"type":"array"},"from_lockfile":{"description":"Instead of from: the text of a package-lock.json, yarn.lock, requirements.txt or poetry.lock (1 MB at most; the whole body 2.5 MB). Lists every package version it pins, with its integrity hash when it has one. Each side is capped at 5,000 distinct packages (413 too_many_items). Send from or from_lockfile, not both","maxLength":1048576,"type":"string"},"to":{"description":"Packages after, as ⟨77 unchanged words⟩ 20,"minItems":0,"type":"array"}},"requiredto_lockfile":[{"fromdescription",:"Instead of to: the text of a package-lock.json, yarn.lock, requirements.txt or poetry.lock (1 MB at most). Each side is capped at 5,000 distinct packages (413 too_many_items). Send to or to_lockfile, not both"],"maxLength":1048576,"type":"string"}},"type":"object"}
⟨9 unchanged words⟩ models answer, e.g. models-20261009T060000Z-1a2b3c4d; kept for 30snapshotssnapshots. /v1/models/changes needs ?since=.","maxLength":64,"pattern":"^models-\\d{8 ⟨12 unchanged words⟩
⟨19 unchanged words⟩ models (LLM prices), cwe (MITRE CWE)or, technique (MITRE ATT&CK) or capec (MITRE CAPEC)","enum":["eol","kev","cve","models","cwe","technique","capec"],"type":"string"},"id":{ ⟨3 unchanged words⟩ check: nodejs, nodejs/22, CVE-2021-44228, openai/gpt-4o, CWE-79, T1059 orT1059CAPEC-66","maxLength":200,"minLength":1,"type ⟨6 unchanged words⟩
Get an IANA language tag (en-AU, zh-Hant) part by part: type, description, scope, deprecation and preferred value from the Language Subtag Registry.
Get one MITRE CAPEC attack pattern by id: severity, likelihood, prerequisites, mitigations, related CWE and ATT&CK ids and MITRE link.
Get one NIST SP 800-53 Rev 5 security control or enhancement by id (AC-2, AC-2(1)): title, statement, guidance, related controls and status.
Get the public suffix, registrable domain and subdomain of a host name from the Mozilla Public Suffix List, with the matching rule and section.
Get the IANA service name, transport, description and reference for a port number from the IANA Service Name and Transport Protocol Port Number Registry.