← Back to search

io.github.CSOAI-ORG/meok-cra-art14-reporter-mcp

CSOAI-ORG streamable_http Scanned 13d ago

MEOK CRA Article 14 Reporter MCP — actively-exploited-vulnerability notification with 24h/72h/14d

MCP Registry ↗
B
88.9 / 100

Versions

1.0.3latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

classify_vulnerability
annotations: none low

cvss_v3 string description str exploited_in_wild bool
open_vulnerability_case
annotations: none low

Open a CRA Article 14 case and start the three clocks. Args: cve_id: CVE identifier (or temporary ID if not yet assigned). product_name: Affected product name. description: Vulnerability description. cvss_v3: CVSS 3.x base score. discovery_ts: ISO timestamp of discovery. Defaults to now. manufacturer: Manufacturer legal name. member_state: ISO 3166-1 alpha-2 (DE, FR, NL, etc.) for national CSIRT mapping. Returns: {case_id, clocks: [...], national_csirt_contact, ...}

cve_id str cvss_v3 float description str discovery_ts string manufacturer str member_state str product_name str
generate_enisa_payload
annotations: none low

Generate the ENISA + national-CSIRT submission payload. Args: case_id: From open_vulnerability_case(). mitigation_steps: Optional list of mitigations applied / planned. Returns: {payload, enisa_email, national_csirt_email}

case_id str mitigation_steps string
check_clock_status
annotations: none low

How many hours remain on each clock for this case?

case_id str
list_national_csirts
annotations: none low

Return the EU national CSIRT contact map.

check_cra_status
annotations: none low

Days remaining until 11 Sept 2026 CRA Article 14 effective date.

sign_chain
annotations: none low

HMAC-sign the full Article 14 case for audit.

case_id str

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 23

low
Tool 'classify_vulnerability' has no annotations annotation_checker · 100%
low
Tool 'open_vulnerability_case' has no annotations annotation_checker · 100%
low
Tool 'generate_enisa_payload' has no annotations annotation_checker · 100%
low
Tool 'check_clock_status' has no annotations annotation_checker · 100%
low
Tool 'list_national_csirts' has no annotations annotation_checker · 100%
low
Tool 'check_cra_status' has no annotations annotation_checker · 100%
low
Tool 'sign_chain' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: classify_vulnerability manifest_parser · 90%
info
Tool: open_vulnerability_case manifest_parser · 90%
info
Tool: generate_enisa_payload manifest_parser · 90%
info
Tool: check_clock_status manifest_parser · 90%
info
Tool: list_national_csirts manifest_parser · 90%
info
Tool: check_cra_status manifest_parser · 90%
info
Tool: sign_chain manifest_parser · 90%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%