io.github.cyanheads/cisa-cybersecurity-mcp-server

io.github.cyanheads/cisa-cybersecurity-mcp-server

CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.

View repository →

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "cisa-cybersecurity-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/cisa-cybersecurity-mcp-server@0.4.0"
      ],
      "env": {
        "CISA_CLAMP_OVERSIZED_INPUTS": "true",
        "MCP_LOG_LEVEL": "info",
        "CISA_KEV_REFRESH_CRON": "*/30 * * * *",
        "CISA_CSAF_MIRROR_AUTO_INIT": "true",
        "CISA_CSAF_REFRESH_CRON": "17 */6 * * *",
        "CISA_VULNRICHMENT_CACHE_TTL_SECONDS": "21600",
        "CISA_FEED_CACHE_TTL_SECONDS": "900",
        "CISA_HTTP_TIMEOUT_MS": "30000"
      }
    }
  }
}
Environment variables
  • CISA_CLAMP_OVERSIZED_INPUTSReturn bounded results and explicit unprocessed CVE IDs for oversized reads. Set false to reject requests above each tool's workload cap.
  • MCP_LOG_LEVELSets the minimum log level for output (e.g., 'debug', 'info', 'warn').
  • CISA_KEV_REFRESH_CRONCron expression for the KEV catalog conditional-refresh poll, on every transport. Set off to disable it; an invalid expression fails startup.
  • CISA_CSAF_MIRROR_AUTO_INITSeed the ICS advisory index in the background at startup when it has never completed a sync, and re-ingest it in place when an older server version built it. Accepts true or false; set false where seeding runs out of band.
  • CISA_CSAF_REFRESH_CRONCron expression for the incremental ICS advisory refresh, on every transport; the refresh also runs once at startup. Set off to disable both; an invalid expression fails startup.
  • CISA_VULNRICHMENT_CACHE_TTL_SECONDSSeconds a fetched SSVC record stays cached. Negative results use one sixth of this value.
  • CISA_FEED_CACHE_TTL_SECONDSSeconds a parsed RSS feed window stays cached.
  • CISA_HTTP_TIMEOUT_MSPer-request timeout in milliseconds for every upstream fetch.

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
0.4.0
Registry
active
Published
11/1/2026

Remotes

  • streamable-httphttps://cisa-cybersecurity.caseyjhand.com/mcp

More Developer Tools servers

Browse all Developer Tools →

io.github.cyanheads/clinicaltrialsgov-mcp-server

cyanheads

Search ClinicalTrials.gov: find studies, retrieve results, match patients to candidate trials.

Developer ToolsAdded 1 week ago

io.github.cyanheads/clipboard-mcp-server

cyanheads

Read, write, and inspect the system clipboard on macOS, Linux (X11/Wayland), and Windows via MCP.

Developer ToolsAdded 1 week ago

io.github.cyanheads/coingecko-mcp-server

cyanheads

Crypto market data via CoinGecko — prices, markets, history, trending, and deep coin metadata.

Developer ToolsAdded 3 weeks ago

io.github.cyanheads/college-scorecard-mcp-server

cyanheads

Search, compare, and analyze U.S. college data — costs, earnings, programs, and outcomes.

Developer ToolsAdded 1 week ago

io.github.cyanheads/congressgov-mcp-server

cyanheads

Access U.S. congressional data (bills, votes, members, committees) via MCP.

Developer ToolsAdded 1 week ago

io.github.cyanheads/courtlistener-mcp-server

cyanheads

Search US court opinions, federal dockets, judges, citations, and oral arguments via CourtListener.

Developer ToolsAdded 1 week ago

Add the badge to your site

Show visitors that io.github.cyanheads/cisa-cybersecurity-mcp-server is listed here — it’s also the link we check for a free listing.

io.github.cyanheads/cisa-cybersecurity-mcp-server — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-cyanheads-cisa-cybersecurity-mcp-server?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="io.github.cyanheads/cisa-cybersecurity-mcp-server — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![io.github.cyanheads/cisa-cybersecurity-mcp-server — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-cyanheads-cisa-cybersecurity-mcp-server?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.