endoflife.ai — Software Lifecycle Intelligence
io.github.endoflife-ai/endoflife-mcpEOL dates, risk scores, CISA KEV exposure, SBOM audits and edge-device EOS for 500+ products.
Watch this dependency
Get before/after evidence when observed tools, schemas, authentication access, availability or the endpoint changes.
Inspect evidence and set up a watch Share public evidence report
Score: 100/100
Handshake verified by our own probe.
why this score
Tools · 10
Check whether a specific version of a software product is end-of-life (EOL). Returns lifecycle status, the EOL date, days remaining or days past EOL, the latest release, and eol_date_source (where the…
Get the proprietary EOL Risk Score (0-100) for a product version, with the four-factor breakdown (EOL recency, attack surface, CISA KEV exposure, extended support). Omit "version" to score the product…
Audit a whole stack at once. Provide a list of products (optionally with versions) — e.g. parsed from a package.json or Dockerfile — and get an EOL Risk Score for each, so you can see what is unsuppor…
List or search the 700+ products endoflife.ai tracks. Pass an optional "query" substring to find the canonical slug for a product before calling the other tools (e.g. "postgres" → "postgresql"). Retur…
Get the full version history for one product: every tracked version/cycle with its release date, EOL date, support status, and EOL Risk Score. Use for "give me the whole EOL schedule for X".
The exploited-vulnerability record for a product: every CVE CISA lists against it in the Known Exploited Vulnerabilities catalog, with the date added, the federal due date and CISA's required-action t…
What reaches end-of-life soon. Returns every tracked version whose EOL date falls within the next N days (default 90), optionally limited to a list of products, sorted by date. Also lists versions tha…
Query the EOS Edge Device Intelligence feed — firewalls, VPN gateways and appliances, ADCs, router and switch operating systems — with end-of-support status in the vocabulary of CISA BOD 26-02 (eos, w…
Where to move a product version: the current version's support status and score, the supported releases with the longest remaining support, endoflife.ai's recommended target, and the vendor's stated s…
Audit a CycloneDX or SPDX JSON software bill of materials. Components are mapped to tracked products and scored for EOL risk; unmatched components are listed honestly rather than guessed. Pass the SBO…
Resources · 7
What endoflife.ai publishes, how to cite it, and the article index.
https://endoflife.ai/llms.txt
Edge platforms with BOD 26-02 end-of-support statuses, KEV records, CPEs, provenance (schema 2.0).
https://endoflife.ai/eos-edge-devices.json
Exploited CVEs whose affected versions will never receive a fix.
https://endoflife.ai/exploited-and-unpatchable.json
Where every served date comes from: vendor-sourced share per product and for the commercial tier, live vendor feeds with last-read dates, open vendor disagreements, published corrections and human ver…
https://endoflife.ai/verification.json
Package URLs (purl) that resolve an SBOM component to a tracked product: products → purls, and a normalised-purl → slug lookup. The join key check_sbom uses; rebuilt at every site build from endoflife…
https://endoflife.ai/purl-map.json
Every tracked product with its attributed KEV entries (dates, due dates, required actions).
https://endoflife.ai/kev-products.json
Every edge line added, removed, re-dated or status-changed, by build date.
https://endoflife.ai/eos-edge-changelog.json
Prompts · 3
Score every component of a stack, then explain what is end-of-life, what is actively exploited, and where to move.
List what reaches end-of-life in a window, grouped by month, with the action each one needs.
Review edge devices against CISA BOD 26-02: past end of support, within 12 months, and the KEV exposure of each.
How to use
Add to your Claude Desktop / Cursor / Cline MCP config:
{
"mcpServers": {
"endoflife.ai_\u2014_software_lifecycle_intelligence": {
"url": "https://mcp.endoflife.ai/mcp",
"transport": "http"
}
}
}