Threatist

Reliability

Status and outage history · Atom feed · Watch with other listings

How to connect

Add it to any MCP client that supports remote servers.

{
  "mcpServers": {
    "threatist": {
      "type": "http",
      "url": "https://threatist.io/mcp"
    }
  }
}

5 tools

• get_advisory

  A Red Hat RHSA or Microsoft KB or ADV with its CVEs and records.

• get_vendor

  A vendor's records, highest priority first. Takes the same filters as search_vulnerabilities.

• get_vulnerability

  A record for a TI id or an alias such as a CVE or GHSA id. Merged ids give the surviving record. By default the record is shortened: no CPE matches, at most 20 references (exploits and patches first) and the 10 newest advisories; trimmed says what was cut.

• list_exploited

  Recent additions to CISA's Known Exploited Vulnerabilities catalogue. Newest first, each with its Threatist record.

• search_vulnerabilities

  Records matching a text and filters, a page at a time. Pass next as cursor for the next page.

Security scan

Recent checks