CVE & EPSS

list_high_epss_cves

Returns CVEs whose EPSS exploit-probability score meets or exceeds a minimum threshold, sorted by EPSS score descending. Use it to surface the CVEs most likely to be exploited in the wild right now. Costs 1 credit.

POST
tools/call

Cost: 1 credit per successful call  ·  Response shape: jsonb

Parameters

min_epssnumberoptionaldefault 0.5

Minimum EPSS score. Must be between 0.0 and 1.0 inclusive. Higher values narrow the result to CVEs with the greatest exploitation likelihood.

limitintegeroptionaldefault 50

Maximum number of CVEs to return. Accepts 1 to 200.

Example invocation

Ask your agent: "Show me the 20 CVEs with the highest EPSS scores above 0.9."

curl -s https://api.edgeprotect.io/functions/v1/mcp \
  -H "Authorization: Bearer $EDGEPROTECT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_high_epss_cves","arguments":{"min_epss":0.9,"limit":20}}}'

Response

{
  "count": 20,
  "min_epss": 0.9,
  "limit": 20,
  "items": [
    {
      "cve_id": "CVE-2024-3094",
      "epss": 0.97531,
      "percentile": 0.99986,
      "delta": 0.00012,
      "updated_at": "2026-05-28T00:00:00Z"
    },
    {
      "cve_id": "CVE-2021-44228",
      "epss": 0.97527,
      "percentile": 0.99985,
      "delta": -0.00003,
      "updated_at": "2026-05-28T00:00:00Z"
    }
  ],
  "generated_at": "2026-05-29T09:15:44.221Z"
}

The full MCP envelope (including _meta.edgeprotect with request_id, credits, and response_truncated) is described in Response Format.

Errors

Code Message When
-32602 invalid_params: min_epss: type min_epss is not a number
-32602 invalid_params: min_epss: min:0 min_epss is less than 0
-32602 invalid_params: min_epss: max:1 min_epss is greater than 1
-32602 invalid_params: limit: min:1 limit is less than 1
-32602 invalid_params: limit: max:200 limit is greater than 200
-32001 unauthorized API key is invalid or revoked
-32002 insufficient_credits Credit balance is zero; top up from the dashboard