Back to Browse

Cisa Cybersecurity MCP Server

SecurityLow Risk10.0MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.

About

CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.

Remote endpoints: streamable-http: https://cisa-cybersecurity.caseyjhand.com/mcp

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry.

7 tools verified · Open access · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').Optional

Environment variable: MCP_LOG_LEVEL

Cron expression for the KEV catalog conditional-refresh poll, on every transport. Set off to disable it; an invalid expression fails startup.Optional

Environment variable: CISA_KEV_REFRESH_CRON

Filesystem path to the local SQLite index of ICS advisories. Unset, it is csaf.sqlite3 under cisa-cybersecurity-mcp-server in the per-user cache directory: ~/Library/Caches on macOS, $XDG_CACHE_HOME or ~/.cache on Linux, %LOCALAPPDATA% on Windows.Optional

Environment variable: CISA_CSAF_MIRROR_PATH

Seed the ICS advisory index in the background at startup when it has never completed a sync, and re-ingest it in place when an older server version built it. Accepts true or false; set false where seeding runs out of band.Optional

Environment variable: CISA_CSAF_MIRROR_AUTO_INIT

Cron expression for the incremental ICS advisory refresh, on every transport; the refresh also runs once at startup. Set off to disable both; an invalid expression fails startup.Optional

Environment variable: CISA_CSAF_REFRESH_CRON

Seconds a fetched SSVC record stays cached. Negative results use one sixth of this value.Optional

Environment variable: CISA_VULNRICHMENT_CACHE_TTL_SECONDS

Seconds a parsed RSS feed window stays cached.Optional

Environment variable: CISA_FEED_CACHE_TTL_SECONDS

Per-request timeout in milliseconds for every upstream fetch.Optional

Environment variable: CISA_HTTP_TIMEOUT_MS

Selects the HTTP transport.Optional

Environment variable: MCP_TRANSPORT_TYPE

The hostname for the HTTP server.Optional

Environment variable: MCP_HTTP_HOST

The port to run the HTTP server on.Optional

Environment variable: MCP_HTTP_PORT

The endpoint path for the MCP server.Optional

Environment variable: MCP_HTTP_ENDPOINT_PATH

Authentication mode to use: 'none', 'jwt', or 'oauth'.Optional

Environment variable: MCP_AUTH_MODE

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!