Your Data · Watchlist

`list_my_relevant_cves`

List CVEs flagged relevant to your organisation (matched to your vendors/products): your vulnerability watchlist, sorted by EPSS. Filter by KEV-only or minimum EPSS. Costs 1 credit.

POST

tools/call

Cost: 1 credit per successful call · Scope: mcp:org · Response shape: jsonb

Returns data scoped to your own organisation only: the organisation is resolved from your API key and injected server-side, never read from the request.

Parameters

kev_onlybooleanoptionaldefault false

When true, only return CVEs that are listed in the CISA KEV catalog.

min_epssnumberoptional

Optional minimum EPSS score. Accepted range: 0–1. Only CVEs with an EPSS score at or above this threshold are returned.

limitintegeroptionaldefault 50

Maximum number of entries to return. Accepted range: 1–200.

Example invocation

Ask your agent: "What KEV-listed CVEs are relevant to our stack?"

curl -s https://api.edgeprotect.io/functions/v1/mcp \
  -H "Authorization: Bearer $EDGEPROTECT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_my_relevant_cves","arguments":{"kev_only":true,"min_epss":0.5,"limit":50}}}'

Response

{
  "count": 2,
  "items": [
    {
      "cve_id": "CVE-2024-3400",
      "vendor": "Palo Alto Networks",
      "product": "PAN-OS",
      "version": "11.1.0",
      "match_type": "product",
      "cvss_score": 10.0,
      "cvss_class": "CRITICAL",
      "epss_score": 0.9612,
      "epss_class": "HIGH",
      "in_kev": true,
      "published": "2024-04-12T08:00:00.000Z"
    },
    {
      "cve_id": "CVE-2024-21762",
      "vendor": "Fortinet",
      "product": "FortiOS",
      "version": "7.4.2",
      "match_type": "vendor",
      "cvss_score": 9.8,
      "cvss_class": "CRITICAL",
      "epss_score": 0.9347,
      "epss_class": "HIGH",
      "in_kev": true,
      "published": "2024-02-09T09:15:00.000Z"
    }
  ],
  "generated_at": "2026-06-18T08:15:00.000Z"
}

The full MCP envelope, including _meta.edgeprotect with request_id, credits, and response_truncated, is documented in Response Format.

Response fields

countintegeroptional

Number of entries returned (equals items.length).

itemsarrayoptional

Relevant CVEs for your organisation, sorted by EPSS score (highest first). Each object contains the fields below.

items[].cve_idstringoptional

CVE identifier for the vulnerability.

items[].vendorstringoptional

Vendor name that matched your watchlist.

items[].productstringoptional

Affected product name.

items[].versionstring | nulloptional

Affected version that matched, where known.

items[].match_typestringoptional

How the CVE was matched to your organisation, e.g. vendor, product, or version.

items[].cvss_scorenumber | nulloptional

CVSS base score (0.0–10.0). null when no CVSS data is present.

items[].cvss_classstring | nulloptional

CVSS severity label, e.g. CRITICAL, HIGH, MEDIUM, LOW.

items[].epss_scorenumber | nulloptional

EPSS exploit-probability score (0.0–1.0). null when no EPSS data exists.

items[].epss_classstring | nulloptional

EPSS banding label, e.g. HIGH, MEDIUM, LOW.

items[].in_kevbooleanoptional

Whether the CVE is listed in the CISA KEV catalog.

items[].publishedstringoptional

ISO 8601 timestamp of the NVD publication date (UTC).

generated_atstringoptional

ISO 8601 timestamp indicating when this response was generated.

Errors

Code	Message	When
`-32602`	`invalid_params: min_epss: min:0`	`min_epss` is less than 0
`-32602`	`invalid_params: min_epss: max:1`	`min_epss` exceeds 1
`-32602`	`invalid_params: limit: min:1`	`limit` is less than 1
`-32602`	`invalid_params: limit: max:200`	`limit` exceeds 200
`-32001`	`unauthorized`	The API key is invalid/revoked, the IP is not allowed, or the key lacks the `mcp:org` scope.
`-32002`	`insufficient_credits`	Your credit balance is zero; top up from the dashboard
`-32603`	`internal`	Unexpected server error; the credit is automatically refunded