Check dependencies against CISA's real Known Exploited Vulnerabilities feed.
| Endpoint | https://exploitwatch-kappa.vercel.app/api/mcp (streamable-http) |
|---|---|
| Registry version | 1.0.0 |
| Now | 1 tools · grade A (100) · pin ts_9cb50714f90a7b3ba2d22c6793efe2aa · protocol 2025-03-26 |
| First / last listed | 2026-10-31 02:14 UTC / 2026-10-31 02:14 UTC |
| Grade over time | 2026-10-31: A (100), 1 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: check_kev
check_kev | Check a comma-separated list of software dependency/product names (e.g. 'lodash, openssl, apache struts') against CISA's real, public Known Exploited Vulnerabilities (KEV) catalog. Returns any current matches with the CVE ID, description, date added, and known ransomware use -- grounded in CISA's live feed, not a guess. Useful for triaging whether a project's dependencies include anything under ac params: dependencies* |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.