First Epss MCP Server: Install & Setup

Install First Epss in Claude Code

Remote URL

Claude Code

claude mcp add --transport http first-epss https://first-epss.caseyjhand.com/mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "first-epss": {
      "url": "https://first-epss.caseyjhand.com/mcp"
    }
  }
}

npm

Claude Code

claude mcp add first-epss -- npx -y @cyanheads/first-epss-mcp-server

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "first-epss": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/first-epss-mcp-server"
      ]
    }
  }
}

Frequently asked questions

What does the First Epss MCP server do?

Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.

Is the First Epss MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does First Epss run locally or remotely?

Local + Remote. Can run locally or be used as a hosted remote server.

How do I add First Epss to Claude Code?

Run: claude mcp add --transport http first-epss https://first-epss.caseyjhand.com/mcp

More security & identity MCP servers

View all

Gadriel AI Security Harness

1901

Gadriel-ai/gadriel-copilot-plugin

AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.

LocalFree

Evals

cyanheads/evals-mcp-server

Author verifiable eval records through a draft→review→revise→submit loop with enforced graders.

LocalFree

GhostFree

186

shane-js/ghostfree

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

LocalFree

Drone

yusiwen/drone-mcp-server

MCP server for Drone CI/CD: 45 tools for builds, repos, secrets, users and templates

LocalFree

GhostPaw Souls

GhostPawJS/souls

Local cognitive identity engine with traits, behavioral evidence, and revision history.

LocalFree

Dingdawg Agent 1

1564

dingdawg/dingdawg-agent-1

AI code review — security, quality, performance. Learns your patterns. Receipted.

LocalFree