loading…
This task focuses on identifying, prioritizing, and remediating vulnerabilities across systems, applications, and software dependencies. It covers known exploited vulnerability prioritization, internet-facing CVE scanning, Log4j exposure hunting, scanner false-positive triage, emergency patch orchestration, and third-party library CVE mapping. The objective is to identify vulnerable assets, determine which vulnerabilities pose the greatest risk, validate findings, and coordinate timely patching or mitigation. It helps security teams reduce the attack surface and ensure that critical vulnerabilities are addressed before they are exploited.
/api/mcp/srv-vulnerability-management-cve-triageMCP enable + token are only for calling from an external client — the playground below needs neither.
Calculate vulnerability metrics and KPIs including MTTR, SLA compliance, and risk trends by time period and grouping
{
"type": "object",
"required": [
"metric"
],
"properties": {
"metric": {
"enum": [
"MTTR",
"SLA_COMPLIANCE",
"RISK_SCORE",
"VULNERABILITY_COUNT",
"REMEDIATION_RATE"
],
"type": "string"
},
"filters": {
"type": "object",
"properties": {
"severity": {
"type": "array",
"items": {
"enum": [
"LOW",
"MEDIUM",
"HIGH",
"CRITICAL"
],
"type": "string"
}
},
"asset_group": {
"type": "string"
},
"business_unit": {
"type": "string"
}
}
},
"end_date": {
"type": "string",
"format": "date"
},
"group_by": {
"enum": [
"SEVERITY",
"ASSET_GROUP",
"BUSINESS_UNIT",
"CVE_YEAR"
],
"type": "string"
},
"start_date": {
"type": "string",
"format": "date"
},
"time_range": {
"enum": [
"7d",
"30d",
"90d",
"1y"
],
"type": "string"
}
}
}Generate vulnerability risk metrics aggregated by asset groups, time periods, or organizational units
{
"type": "object",
"required": [
"group_by"
],
"properties": {
"metrics": {
"type": "array",
"items": {
"enum": [
"vulnerability_count",
"mean_time_to_remediation",
"sla_compliance",
"risk_score"
],
"type": "string"
}
},
"end_date": {
"type": "string",
"format": "date"
},
"group_by": {
"enum": [
"asset_type",
"business_unit",
"location",
"criticality",
"owner"
],
"type": "string"
},
"start_date": {
"type": "string",
"format": "date"
},
"time_range": {
"enum": [
"7d",
"30d",
"90d",
"1y",
"custom"
],
"type": "string"
},
"include_trends": {
"type": "boolean",
"default": true
}
}
}Create vulnerability exception with business justification and approval workflow for accepted risks
{
"type": "object",
"required": [
"vulnerability_id",
"exception_type",
"justification",
"expiration_date"
],
"properties": {
"approver_id": {
"type": "string"
},
"justification": {
"type": "string"
},
"exception_type": {
"enum": [
"business_justification",
"compensating_controls",
"technical_limitation"
],
"type": "string"
},
"expiration_date": {
"type": "string",
"format": "date"
},
"vulnerability_id": {
"type": "string"
},
"compensating_controls": {
"type": "array",
"items": {
"type": "string"
}
}
}
}Create remediation ticket in integrated ITSM system with vulnerability details, affected assets, and SLA requirements
{
"type": "object",
"required": [
"vulnerability_id",
"ticket_system",
"assignee"
],
"properties": {
"assignee": {
"type": "string"
},
"priority": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
},
"ticket_system": {
"enum": [
"jira",
"servicenow",
"remedy",
"custom"
],
"type": "string"
},
"affected_assets": {
"type": "array",
"items": {
"type": "string"
}
},
"vulnerability_id": {
"type": "string"
},
"remediation_steps": {
"type": "string"
},
"maintenance_window": {
"type": "string",
"format": "date-time"
},
"business_justification": {
"type": "string"
}
}
}Generate and export vulnerability assessment reports in specified formats with custom filtering and compliance mappings
{
"type": "object",
"required": [
"report_type",
"format"
],
"properties": {
"format": {
"enum": [
"pdf",
"xlsx",
"csv",
"json"
],
"type": "string"
},
"filters": {
"type": "object",
"properties": {
"status": {
"type": "array",
"items": {
"enum": [
"new",
"triaged",
"accepted_risk",
"false_positive",
"remediated"
],
"type": "string"
}
},
"severity": {
"type": "array",
"items": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
}
},
"date_range": {
"enum": [
"7d",
"30d",
"90d",
"1y"
],
"type": "string"
},
"asset_groups": {
"type": "array",
"items": {
"type": "string"
}
}
}
},
"report_type": {
"enum": [
"executive_summary",
"technical_details",
"compliance_mapping",
"trend_analysis"
],
"type": "string"
},
"compliance_frameworks": {
"type": "array",
"items": {
"enum": [
"pci_dss",
"sox",
"nist",
"iso27001",
"hipaa"
],
"type": "string"
}
}
}
}Generate vulnerability risk assessment report for assets, business units, or entire organization with executive summary
{
"type": "object",
"required": [
"scope",
"report_type"
],
"properties": {
"scope": {
"enum": [
"asset",
"asset_group",
"business_unit",
"organization"
],
"type": "string"
},
"format": {
"enum": [
"pdf",
"xlsx",
"json"
],
"type": "string"
},
"end_date": {
"type": "string",
"format": "date"
},
"scope_id": {
"type": "string"
},
"start_date": {
"type": "string",
"format": "date"
},
"time_range": {
"enum": [
"7d",
"30d",
"90d",
"1y",
"custom"
],
"type": "string"
},
"report_type": {
"enum": [
"executive",
"technical",
"compliance",
"trend"
],
"type": "string"
},
"include_remediation_plan": {
"type": "boolean",
"default": true
}
}
}Get all vulnerabilities detected on a specific asset with their current triage status and remediation timelines
{
"type": "object",
"required": [
"asset_id"
],
"properties": {
"status": {
"type": "array",
"items": {
"enum": [
"new",
"triaged",
"accepted_risk",
"false_positive",
"remediated",
"verified"
],
"type": "string"
}
},
"asset_id": {
"type": "string"
},
"severity": {
"type": "array",
"items": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
}
},
"include_resolved": {
"type": "boolean",
"default": false
}
}
}Retrieve compliance status and vulnerability counts against security frameworks like PCI-DSS, SOX, NIST
{
"type": "object",
"required": [
"framework"
],
"properties": {
"framework": {
"enum": [
"pci-dss",
"sox",
"nist",
"iso27001",
"cis",
"custom"
],
"type": "string"
},
"time_range": {
"enum": [
"30d",
"90d",
"1y"
],
"type": "string"
},
"environment": {
"enum": [
"production",
"staging",
"development"
],
"type": "string"
},
"business_unit": {
"type": "string"
},
"include_trends": {
"type": "boolean",
"default": true
}
}
}Retrieve detailed CVE information including CVSS metrics, affected products, exploit availability, and remediation guidance
{
"type": "object",
"required": [
"cve_id"
],
"properties": {
"cve_id": {
"type": "string",
"pattern": "^CVE-\\d{4}-\\d{4,}$"
}
}
}Retrieve vulnerability scan results with findings, CVSS scores, and remediation recommendations by scan ID
{
"type": "object",
"required": [
"scan_id"
],
"properties": {
"scan_id": {
"type": "string"
},
"status_filter": {
"type": "array",
"items": {
"enum": [
"new",
"confirmed",
"false_positive",
"remediated"
],
"type": "string"
}
},
"severity_filter": {
"type": "array",
"items": {
"enum": [
"critical",
"high",
"medium",
"low",
"info"
],
"type": "string"
}
},
"include_false_positives": {
"type": "boolean",
"default": false
}
}
}Retrieve detailed vulnerability information including CVSS metrics, affected assets, and remediation status by CVE ID
{
"type": "object",
"required": [
"cve_id"
],
"properties": {
"cve_id": {
"type": "string",
"pattern": "^CVE-[0-9]{4}-[0-9]+$"
},
"include_assets": {
"type": "boolean",
"default": true
},
"include_exploits": {
"type": "boolean",
"default": true
}
}
}List assets in the vulnerability management system with filtering by criticality, environment, or asset group
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"offset": {
"type": "integer",
"default": 0
},
"asset_group": {
"type": "string"
},
"criticality": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
},
"environment": {
"enum": [
"production",
"staging",
"development",
"test"
],
"type": "string"
},
"operating_system": {
"type": "string"
}
}
}Initiate vulnerability scan on specific asset or asset group and return scan job ID
{
"type": "object",
"required": [],
"properties": {
"asset_id": {
"type": "string"
},
"priority": {
"enum": [
"immediate",
"high",
"normal",
"low"
],
"type": "string"
},
"scan_type": {
"enum": [
"authenticated",
"unauthenticated",
"compliance",
"full"
],
"type": "string"
},
"asset_group": {
"type": "string"
},
"scan_template": {
"type": "string"
},
"notify_on_completion": {
"type": "boolean",
"default": true
}
}
}Search CVEs by keyword, CVSS score range, vendor, product, or publication date with filtering and pagination
{
"type": "object",
"required": [
"query"
],
"properties": {
"limit": {
"type": "integer",
"default": 50
},
"query": {
"type": "string"
},
"offset": {
"type": "integer",
"default": 0
},
"vendor": {
"type": "string"
},
"product": {
"type": "string"
},
"cvss_max": {
"type": "number",
"maximum": 10,
"minimum": 0
},
"cvss_min": {
"type": "number",
"maximum": 10,
"minimum": 0
},
"severity": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
},
"published_after": {
"type": "string",
"format": "date"
},
"published_before": {
"type": "string",
"format": "date"
}
}
}Update vulnerability triage status, assign owner, set priority, and add remediation notes
{
"type": "object",
"required": [
"vulnerability_id",
"status"
],
"properties": {
"status": {
"enum": [
"new",
"triaged",
"in_progress",
"remediated",
"risk_accepted",
"false_positive"
],
"type": "string"
},
"due_date": {
"type": "string",
"format": "date"
},
"priority": {
"enum": [
"p1",
"p2",
"p3",
"p4"
],
"type": "string"
},
"assigned_to": {
"type": "string"
},
"vulnerability_id": {
"type": "string"
},
"remediation_notes": {
"type": "string"
},
"risk_acceptance_reason": {
"type": "string"
}
}
}