加载中…
CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.
io.github.cyanheads/cisa-cybersecurity-mcp-server 是 ChatHome Skills 收录的 MCP 条目，来源为 Official MCP Registry，质量分 78/100。 作为 Model Context Protocol 服务器，它向 Claude、Cursor、Copilot 等兼容 MCP 的 LLM 客户端暴露可直接调用的工具，让 agent 的能力超出模型内置范围。 该条目由 ChatHome Skills 的每日抓取从官方 registry 和 GitHub 发现查询中收录，每次运行都会重新核验仓库事实、新鲜度信号和安装元数据。 质量分综合了官方 registry 收录情况、可用安装命令、许可证完整性、仓库活跃度和 GitHub star 趋势，完整算法说明见来源页。安装命令已列于上方，可直接复制使用。 在将 io.github.cyanheads/cisa-cybersecurity-mcp-server 加入生产 agent 工作流前，请核对上方的最近更新日期和仓库状态——下方事实快照是最近一次抓取的时点值。
mcp add io.github.cyanheads/cisa-cybersecurity-mcp-server https://cisa-cybersecurity.caseyjhand.com/mcp运行此命令前，请先核对上游源码。
{
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"isLatest": true,
"updatedAt": "2026-10-14T21:31:06.737755Z",
"publishedAt": "2026-10-14T21:31:06.737755Z",
"statusChangedAt": "2026-10-14T21:31:06.737755Z"
}
},
"server": {
"name": "io.github.cyanheads/cisa-cybersecurity-mcp-server",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://cisa-cybersecurity.caseyjhand.com/mcp",
"type": "streamable-http"
}
],
"version": "0.3.2",
"packages": [
{
"version": "0.3.2",
"transport": {
"type": "stdio"
},
"identifier": "@cyanheads/cisa-cybersecurity-mcp-server",
"runtimeHint": "npx",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org",
"environmentVariables": [
{
"name": "MCP_LOG_LEVEL",
"format": "string",
"default": "info",
"description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn')."
},
{
"name": "CISA_KEV_REFRESH_CRON",
"format": "string",
"default": "*/30 * * * *",
"description": "Cron expression for the KEV catalog conditional-refresh poll, on every transport. Set off to disable it; an invalid expression fails startup."
},
{
"name": "CISA_CSAF_MIRROR_PATH",
"format": "string",
"description": "Filesystem path to the local SQLite index of ICS advisories. Unset, it is csaf.sqlite3 under cisa-cybersecurity-mcp-server in the per-user cache directory: ~/Library/Caches on macOS, $XDG_CACHE_HOME or ~/.cache on Linux, %LOCALAPPDATA% on Windows."
},
{
"name": "CISA_CSAF_MIRROR_AUTO_INIT",
"format": "string",
"default": "true",
"description": "Seed the ICS advisory index in the background at startup when it has never completed a sync, and re-ingest it in place when an older server version built it. Accepts true or false; set false where seeding runs out of band."
},
{
"name": "CISA_CSAF_REFRESH_CRON",
"format": "string",
"default": "17 */6 * * *",
"description": "Cron expression for the incremental ICS advisory refresh, on every transport; the refresh also runs once at startup. Set off to disable both; an invalid expression fails startup."
},
{
"name": "CISA_VULNRICHMENT_CACHE_TTL_SECONDS",
"format": "string",
"default": "21600",
"description": "Seconds a fetched SSVC record stays cached. Negative results use one sixth of this value."
},
{
"name": "CISA_FEED_CACHE_TTL_SECONDS",
"format": "string",
"default": "900",
"description": "Seconds a parsed RSS feed window stays cached."
},
{
"name": "CISA_HTTP_TIMEOUT_MS",
"format": "string",
"default": "30000",
"description": "Per-request timeout in milliseconds for every upstream fetch."
}
]
},
{
"version": "0.3.2",
"transport": {
"url": "http://localhost:3010/mcp",
"type": "streamable-http"
},
"identifier": "@cyanheads/cisa-cybersecurity-mcp-server",
"runtimeHint": "npx",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org",
"environmentVariables": [
{
"name": "MCP_TRANSPORT_TYPE",
"value": "http",
"format": "string",
"description": "Selects the HTTP transport."
},
{
"name": "MCP_HTTP_HOST",
"format": "string",
"default": "127.0.0.1",
"description": "The hostname for the HTTP server."
},
{
"name": "MCP_HTTP_PORT",
"format": "string",
"default": "3010",
"description": "The port to run the HTTP server on."
},
{
"name": "MCP_HTTP_ENDPOINT_PATH",
"format": "string",
"default": "/mcp",
"description": "The endpoint path for the MCP server."
},
{
"name": "MCP_AUTH_MODE",
"format": "string",
"default": "none",
"description": "Authentication mode to use: 'none', 'jwt', or 'oauth'."
},
{
"name": "MCP_LOG_LEVEL",
"format": "string",
"default": "info",
"description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn')."
},
{
"name": "CISA_KEV_REFRESH_CRON",
"format": "string",
"default": "*/30 * * * *",
"description": "Cron expression for the KEV catalog conditional-refresh poll, on every transport. Set off to disable it; an invalid expression fails startup."
},
{
"name": "CISA_CSAF_MIRROR_PATH",
"format": "string",
"description": "Filesystem path to the local SQLite index of ICS advisories. Unset, it is csaf.sqlite3 under cisa-cybersecurity-mcp-server in the per-user cache directory: ~/Library/Caches on macOS, $XDG_CACHE_HOME or ~/.cache on Linux, %LOCALAPPDATA% on Windows."
},
{
"name": "CISA_CSAF_MIRROR_AUTO_INIT",
"format": "string",
"default": "true",
"description": "Seed the ICS advisory index in the background at startup when it has never completed a sync, and re-ingest it in place when an older server version built it. Accepts true or false; set false where seeding runs out of band."
},
{
"name": "CISA_CSAF_REFRESH_CRON",
"format": "string",
"default": "17 */6 * * *",
"description": "Cron expression for the incremental ICS advisory refresh, on every transport; the refresh also runs once at startup. Set off to disable both; an invalid expression fails startup."
},
{
"name": "CISA_VULNRICHMENT_CACHE_TTL_SECONDS",
"format": "string",
"default": "21600",
"description": "Seconds a fetched SSVC record stays cached. Negative results use one sixth of this value."
},
{
"name": "CISA_FEED_CACHE_TTL_SECONDS",
"format": "string",
"default": "900",
"description": "Seconds a parsed RSS feed window stays cached."
},
{
"name": "CISA_HTTP_TIMEOUT_MS",
"format": "string",
"default": "30000",
"description": "Per-request timeout in milliseconds for every upstream fetch."
}
]
}
],
"repository": {
"url": "https://github.com/cyanheads/cisa-cybersecurity-mcp-server",
"source": "github"
},
"description": "CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless."
}
}