io.github.cyanheads/cisa-cybersecurity-mcp-server
cisa-cybersecurity-mcp-server
CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.
alive probed 2026-10-15 · HTTP 200
7tools
8.2ktokens in Claude Opus 5.5
8.4ktokens in Claude Code
4.1 %of a 200k context window
5.1ko200k_base estimate
366 msto initialize
118 msto list tools
- Endpoint
- https://cisa-cybersecurity.caseyjhand.com/mcp (streamable-http)
- Host
- cisa-cybersecurity.caseyjhand.com
- Protocol
- 2025-11-25
- Reports itself as
- cisa-cybersecurity-mcp-server 0.3.2
- Capabilities
- completions, logging, prompts, resources, tools
- Instructions
- 1 439 characters
- Claude count
- Claude Opus 5.5, measured 2026-10-15. Counted again when the tool definitions change. Method.
- Repository
- https://github.com/cyanheads/cisa-cybersecurity-mcp-server
- Registry
- active, updated 2026-10-14 · registry entry
- Reachable
- 8 of the last 8 probes
Most expensive tools
| Tool | Tokens (o200k) | Share of this server |
|---|---|---|
| cisa_search_ics_advisories | 1 591 | 31 % |
| cisa_search_kev | 1 318 | 26 % |
| cisa_check_cve_status | 553 | 11 % |
| cisa_get_advisory | 529 | 10 % |
| cisa_get_alerts | 417 | 8 % |
History
We add a row when the result changes. A server with no change keeps its last row.
| Probed | Result | Init | Tools | Claude | o200k |
|---|---|---|---|---|---|
| 2026-10-15 10:33 | alive | 246 ms | 7 | 8.2k | 5.1k |
| 2026-10-09 11:18 | alive | 694 ms | 7 | 6.7k | 3.9k |
| 2026-10-05 14:38 | alive | 366 ms | 7 | 6.7k | 3.9k |
| 2026-10-05 00:33 | alive | 228 ms | 7 | 3.9k | |
| 2026-10-04 10:04 | alive | 721 ms | 7 | 3.9k | |
| 2026-10-04 07:57 | alive | 539 ms | 7 | 3.9k | |
| 2026-10-03 20:37 | alive | 887 ms | 7 | 3.9k | |
| 2026-10-03 17:53 | alive | 562 ms | 7 | 3.9k |
Badge and feed
[](https://mcpcost.ulehla.dev/s/io.github.cyanheads/cisa-cybersecurity-mcp-server)
An entry for every probe that changed the result, the tool count or the token cost: Atom feed. Add it to a feed reader or a Slack RSS app to hear when the server stops answering or its tool set grows.