get_vendor
Returns a vendor summary: total CVE count, product count, and a per-product list of associated CVE IDs. Costs 1 credit.
Cost: 1 credit per successful call · Response shape: jsonb
Parameters
vendorstringrequiredVendor name, 1–128 characters. Case-insensitive; normalized server-side.
Example invocation
Ask your agent: "Give me a vendor summary for Microsoft, including product count and CVE breakdown."
curl -s https://api.edgeprotect.io/functions/v1/mcp \
-H "Authorization: Bearer $EDGEPROTECT_API_KEY" \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"get_vendor","arguments":{"vendor":"microsoft"}}}'
Response
{
"vendor": "microsoft",
"cve_count": 12438,
"product_count": 312,
"products": {
"windows_server_2022": ["CVE-2024-26169", "CVE-2024-21338"],
"exchange_server": ["CVE-2024-21410", "CVE-2023-23397"]
}
}
For vendors with many products the products map can be large. Use get_vendor_product to drill into a specific product.
The full MCP envelope (including _meta.edgeprotect with request ID and credit details) is described in Response Format.
Errors
| Code | Message | When |
|---|---|---|
-32602 |
invalid_params: vendor: required_string |
vendor argument is missing |
-32602 |
invalid_params: vendor: length:1..128 |
vendor exceeds 128 characters or is empty |
-32001 |
unauthorized |
API key is invalid, revoked, or not permitted from this IP |
-32002 |
insufficient_credits |
Credit balance is zero; top up from the dashboard |
A well-formed request for a vendor not present in the CPE catalog returns a successful response (credit charged) with { "error": "not_found" } in the payload and the credit is refunded automatically.

