ONE MCP ENDPOINT
https://cyber.mcp.brunosan.de/mcp
MCP-native. Read-only. Source-verifiable. Built for security agents and inventory-aware triage.
CYBER MCP · 12 READ-ONLY TOOLS
Give your agent a decision spine.
Query CVEs, products, vendors, evidence and risk signals—then turn them into one traceable Decision State with confidence and change conditions.
TOOL DISCOVERY
Twelve tools. One evidence contract.
Seven tools expose the cyber corpus. Five Decision Spine tools add exploitation status, inventory assessment, patch priority and decision diffs.
Search the normalized cyber corpus by CVE, vendor, product, event type or source.
Return the strongest current cyber signals with source and freshness context.
Resolve a CVE into CVSS, EPSS, KEV, products, evidence and provenance.
Summarize the current cyber snapshot without collapsing evidence types.
List CVEs with CISA KEV status and the evidence needed to act.
Aggregate vulnerability signals by vendor without claiming organizational exposure.
Connect Cyber with Regulatory, Finance, Geopolitics and Quantum intelligence.
Return one defensible Decision State with evidence, confidence and change conditions.
Match CVEs against inventory as confirmed, possible, not affected or unknown.
Prioritize remediation from exploitation, patch, mitigation and inventory evidence.
Return a decision diff: what changed, why it matters and what to do next.
Triage multiple CVEs with one consistent decision contract.
DECISION CONTRACT
Every answer can show its work.
The response carries action, confidence, source provenance and explicit change conditions.
{
"cve_id": "CVE-2026-59856",
"decision": {
"state": "WATCH",
"recommended_action": "REVIEW_AND_WATCH",
"confidence": 0.9,
"what_would_change_this": [
"Confirmed active exploitation evidence.",
"A qualifying patch or mitigation change.",
"A confirmed inventory match."
]
},
"source_provenance": {
"independent_sources": 2
}
}IMPLEMENTATION QUESTIONS
Built for accountable agents.
The MCP exposes live objects and relationships without hiding uncertainty behind narrative certainty.
Are all tools read-only?
Yes. Public Cyber MCP tools return intelligence objects, evidence, relationships and decisions.
Can I submit inventory?
The assessment tool accepts inventory for the request and returns confirmed, possible, not affected or unknown matches.
How are hallucinations constrained?
Decision logic is deterministic and evidence-aware. Factual decision fields are normalized from the object graph.