CVE & EPSS
list_high_epss_cves
Returns CVEs whose EPSS exploit-probability score meets or exceeds a minimum threshold, sorted by EPSS score descending. Use it to surface the CVEs most likely to be exploited in the wild right now. Costs 1 credit.
Cost: 1 credit per successful call · Response shape: jsonb
Parameters
min_epssnumberoptionaldefault 0.5Minimum EPSS score. Must be between 0.0 and 1.0 inclusive. Higher values narrow the result to CVEs with the greatest exploitation likelihood.
limitintegeroptionaldefault 50Maximum number of CVEs to return. Accepts 1 to 200.
Example invocation
Ask your agent: "Show me the 20 CVEs with the highest EPSS scores above 0.9."
curl -s https://api.edgeprotect.io/functions/v1/mcp \
-H "Authorization: Bearer $EDGEPROTECT_API_KEY" \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_high_epss_cves","arguments":{"min_epss":0.9,"limit":20}}}'
Response
{
"count": 20,
"min_epss": 0.9,
"limit": 20,
"items": [
{
"cve_id": "CVE-2024-3094",
"epss": 0.97531,
"percentile": 0.99986,
"delta": 0.00012,
"updated_at": "2026-05-28T00:00:00Z"
},
{
"cve_id": "CVE-2021-44228",
"epss": 0.97527,
"percentile": 0.99985,
"delta": -0.00003,
"updated_at": "2026-05-28T00:00:00Z"
}
],
"generated_at": "2026-05-29T09:15:44.221Z"
}
The full MCP envelope (including _meta.edgeprotect with request_id, credits, and response_truncated) is described in Response Format.
Errors
| Code | Message | When |
|---|---|---|
-32602 |
invalid_params: min_epss: type |
min_epss is not a number |
-32602 |
invalid_params: min_epss: min:0 |
min_epss is less than 0 |
-32602 |
invalid_params: min_epss: max:1 |
min_epss is greater than 1 |
-32602 |
invalid_params: limit: min:1 |
limit is less than 1 |
-32602 |
invalid_params: limit: max:200 |
limit is greater than 200 |
-32001 |
unauthorized |
API key is invalid or revoked |
-32002 |
insufficient_credits |
Credit balance is zero; top up from the dashboard |

