ansvar-systems avatar

Ansvar: Threat Intelligence

ansvar-systems/ansvar-gateway

Connects Claude to Ansvar's EU-hosted threat intelligence gateway for security engineering workflows. Exposes CVE lookups, STRIDE threat modeling, and OWASP ASVS test case generation with article-level citations back to frameworks like ISO 27001 and NIS2. Every answer includes source URLs, confidence scores, and audit trails. Requires OAuth and a paid Ansvar account. Reach for this when you're running threat models or gap analyses and need control mappings that cite exactly where each mitigation comes from, not just generic security advice. The gateway fans requests across 262 security frameworks and can cross-reference your internal policies in the same citation contract.

tools
8
transport
HTTP
last updated
Jul 13, 2026

Tools

8 tools

Public tool metadata for what this MCP can expose to an agent.

lookup_cveGet full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.1 params

Get full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.

Parameters* required
cve_idstring
CVE identifier in format CVE-YYYY-NNNNN (e.g., CVE-2024-3400)
assess_tech_riskAssess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names only.1 params

Assess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names only.

Parameters* required
technologiesstring
Comma-separated list of technology names (e.g., "Apache HTTP Server, OpenSSL, nginx"). Max 50 technologies.
search_cvesSearch for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.4 params

Search for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.

Parameters* required
has_exploitstring
Only show CVEs with public exploitsone of true · false
is_kevstring
Only show CVEs in CISA KEV catalogone of true · false
querystring
Search keyword (CVE ID, technology name, or description)
severitystring
Filter by severityone of CRITICAL · HIGH · MEDIUM · LOW
get_kev_recentGet recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.1 params

Get recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.

Parameters* required
daysstring
Number of days to look back (1-365, default: 30)
get_trending_cvesGet currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.1 params

Get currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.

Parameters* required
limitstring
Maximum results to return (1-100, default: 20)
get_weaponization_scoreGet the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.1 params

Get the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.

Parameters* required
cve_idstring
CVE identifier in format CVE-YYYY-NNNNN (e.g., CVE-2024-3400)
lookup_ip_reputationLook up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Input must be a valid IPv4 address.1 params

Look up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Input must be a valid IPv4 address.

Parameters* required
ipstring
IPv4 address to look up (e.g., 1.2.3.4)
get_threat_statsGet statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.

Get statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.

No parameter schema in public metadata yet.

Sponsors

Readme

Ansvar Gateway

EU regulatory intelligence over MCP — law, regulations, standards & threat intel, every answer cited or refused.

Ansvar Gateway is a remote MCP server for compliance, legal, and security work. One OAuth connection gives your agent scoped search and get_provision across audited law corpora — Europe-led, with growing North American and APAC coverage; the live, licence-audited jurisdiction list is at ansvar.eu/coverage — plus the EU regulations corpus (GDPR, NIS2, DORA, AI Act, CRA, …), the security-frameworks corpus, and live CVE/KEV/EPSS intelligence.

Every result carries a source citation (_citation: URL, publisher, licence) — answers are cited from fetched text or explicitly refused, never guessed from model memory. Paid tiers add full-fleet fan-out, case law / preparatory works / agency guidance, and structured workflows (DPIA, STRIDE/LINDDUN, gap analysis) that return exportable deliverables.

Connect


View the full README on GitHub

Details

Repository
github.com/ansvar-systems/ansvar-gateway
Website
ansvar.eu
Category
Security & Pentesting
Transport
HTTP
Registry
MCP registry, active

More from ansvar-systems

Related Security & Pentesting MCP servers

View all
1pierre3 avatarOWASP ZAP MCP Serverpierre3/dotnet-zap-mcpMCP server for OWASP ZAP vulnerability scanning with Docker management3stars
2blackducksoftware avatarBlack Duck Security Scannerblackducksoftware/mcp-serverAI-powered security scanning using Black Duck Signal for vulnerability detection.0stars
3braineetech avatarSectorabraineetech/sectoraThreat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.0stars
4frogeye-ai avatarFrogeye Security Scannerfrogeye-ai/mcpZero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.0stars
5gsepcore avatarGsep Mcpgsepcore/gsep-mcpAI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.0stars
6traveljamboree avatarAgentSec MCPio.github.traveljamboree/agentsec-mcpSecurity intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning.0stars