Back to search
100
MCP live MCP 2025-03-26 streamable-http

io.github.megabrainee/sectora

io.github.megabrainee/sectora

Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.

Uptime
100.0%
1 direct probes · 30d
Response
226ms
last probe
Tools
14
callable
Resources
0
readable
Prompts
0
available
Primary URL
https://mcp.sectora.io/mcp

Tools · 14

lookup_cve

Get full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.

assess_tech_risk

Assess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names only.

search_cves

Search for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.

get_kev_recent

Get recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.

get_trending_cves

Get currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.

get_weaponization_score

Get the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.

lookup_ip_reputation

Look up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Accepts IPv4 or IPv6 (the Shield network sees both).

get_threat_stats

Get statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.

list_my_findings

List the API key owner's open security findings across all scans. Use this to answer "what's my current exposure?" Filter by severity, status, or domain. Returns finding summaries; call get_scan for f…

list_my_scans

List the API key owner's recent scans with summary counts. Requires API key.

get_scan

Get a scan with all its findings (full detail: title, description, evidence, remediation, CVSS). Requires API key.

scan_url

Kick off a DAST security scan against a public URL the API key owner controls. Two-step flow: first call returns a preview (target, profile, ETA, quota remaining); confirm by calling again with confir…

get_my_posture

Get Shield WAF posture score and breakdown for a domain registered under this account. Returns 0-100 score, letter grade, per-component breakdown (origin lock, virtual patching, TLS, etc.), and edge_h…

assess_dependency

Check a single package@version for known vulnerabilities via OSV.dev (npm, PyPI, Go, Maven, NuGet, RubyGems, Packagist, crates.io, etc.). Returns advisories with CVE IDs, severity, fixed versions, and…

How to use

Add to your Claude Desktop / Cursor / Cline MCP config:

{
  "mcpServers": {
    "io.github.megabrainee/sectora": {
      "url": "https://mcp.sectora.io/mcp",
      "transport": "streamable-http"
    }
  }
}