Summary
Connects Claude to Ansvar's EU-hosted threat intelligence gateway for security engineering workflows. Exposes CVE lookups, STRIDE threat modeling, and OWASP ASVS test case generation with article-level citations back to frameworks like ISO 27001 and NIS2. Every answer includes source URLs, confidence scores, and audit trails. Requires OAuth and a paid Ansvar account. Reach for this when you're running threat models or gap analyses and need control mappings that cite exactly where each mitigation comes from, not just generic security advice. The gateway fans requests across 262 security frameworks and can cross-reference your internal policies in the same citation contract.
Keep your Mac awake while Claude Code and 40+ AI agents run. Sleeps when they're idle.
One time payment $9 →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
On Capafy, your Skill runs online 24/7 as an agent product, and you get paid every time someone uses it.
Start earning →
Tools
Public tool metadata for what this MCP can expose to an agent.
8 tools
lookup_cveGet full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.1 params
Get full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.
Parameters* required
cve_idstringCVE identifier in format CVE-YYYY-NNNNN (e.g., CVE-2024-3400)
assess_tech_riskAssess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names only.1 params
Assess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names only.
Parameters* required
technologiesstringComma-separated list of technology names (e.g., "Apache HTTP Server, OpenSSL, nginx"). Max 50 technologies.
search_cvesSearch for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.4 params
Search for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.
Parameters* required
querystringSearch keyword (CVE ID, technology name, or description)
is_kevstringOnly show CVEs in CISA KEV catalogone of
true · falseseveritystringFilter by severityone of
CRITICAL · HIGH · MEDIUM · LOWhas_exploitstringOnly show CVEs with public exploitsone of
true · falseget_kev_recentGet recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.1 params
Get recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.
Parameters* required
daysstringNumber of days to look back (1-365, default: 30)
get_trending_cvesGet currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.1 params
Get currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.
Parameters* required
limitstringMaximum results to return (1-100, default: 20)
get_weaponization_scoreGet the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.1 params
Get the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.
Parameters* required
cve_idstringCVE identifier in format CVE-YYYY-NNNNN (e.g., CVE-2024-3400)
lookup_ip_reputationLook up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Input must be a valid IPv4 address.1 params
Look up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Input must be a valid IPv4 address.
Parameters* required
ipstringIPv4 address to look up (e.g., 1.2.3.4)
get_threat_statsGet statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.
Get statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.
No parameter schema in public metadata yet.
Featured
Keep your Mac awake while Claude Code and 40+ AI agents run. Sleeps when they're idle.
One time payment $9 →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →On Capafy, your Skill runs online 24/7 as an agent product, and you get paid every time someone uses it.
Start earning →
