{"serverId":"mcp-registry/io.github.megabrainee/sectora","tools":[{"name":"get_kev_recent","fixed":{"name":"get_kev_recent","description":"Get recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.","inputSchema":{"type":"object","properties":{"days":{"type":"string","pattern":"^\\d{1,3}$","maxLength":3,"description":"Number of days to look back (1-365, default: 30)"}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":84,"tokensAfter":84},{"name":"get_my_posture","fixed":{"name":"get_my_posture","description":"Get Shield WAF posture score and breakdown for a domain registered under this account. Returns 0-100 score, letter grade, per-component breakdown (origin lock, virtual patching, TLS, etc.), and edge_health (whether Shield is actually intercepting traffic). Requires API key.","inputSchema":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","pattern":"^[a-z0-9.-]+$","maxLength":253,"description":"Domain registered under your Sectora account"}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":144,"tokensAfter":144},{"name":"get_scan","fixed":{"name":"get_scan","description":"Get a scan with all its findings (full detail: title, description, evidence, remediation, CVSS). Requires API key.","inputSchema":{"type":"object","required":["scan_id"],"properties":{"scan_id":{"type":"string","pattern":"^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$","maxLength":36,"description":"Scan UUID"}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":102,"tokensAfter":102},{"name":"get_threat_stats","fixed":{"name":"get_threat_stats","description":"Get statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.","inputSchema":{"type":"object","properties":{}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":70,"tokensAfter":70},{"name":"get_trending_cves","fixed":{"name":"get_trending_cves","description":"Get currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.","inputSchema":{"type":"object","properties":{"limit":{"type":"string","pattern":"^\\d{1,3}$","maxLength":3,"description":"Maximum results to return (1-100, default: 20)"}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":89,"tokensAfter":89},{"name":"get_weaponization_score","fixed":{"name":"get_weaponization_score","description":"Get the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.","inputSchema":{"type":"object","required":["cve_id"],"properties":{"cve_id":{"type":"string","pattern":"^CVE-\\d{4}-\\d{4,}$","maxLength":20,"description":"CVE identifier in format CVE-YYYY-NNNNN (e.g., CVE-2024-3400)"}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":119,"tokensAfter":119},{"name":"list_my_findings","fixed":{"name":"list_my_findings","description":"List the API key owner's open security findings across all scans. Use this to answer \"what's my current exposure?\" Filter by severity, status, or domain. Returns finding summaries; call get_scan for full detail. Requires API key.","inputSchema":{"type":"object","properties":{"limit":{"type":"string","pattern":"^\\d{1,3}$","maxLength":3,"description":"Max findings (1-100, default: 25)"},"domain":{"type":"string","maxLength":253,"description":"Limit to a single domain (e.g., app.example.com)"},"status":{"enum":["open","confirmed"],"type":"string","description":"Filter by confirmation status"},"severity":{"type":"string","maxLength":50,"description":"Comma-separated severities to include: critical, high, medium, low, info"}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":216,"tokensAfter":216},{"name":"list_my_scans","fixed":{"name":"list_my_scans","description":"List the API key owner's recent scans with summary counts. Requires API key.","inputSchema":{"type":"object","properties":{"limit":{"type":"string","pattern":"^\\d{1,3}$","maxLength":3,"description":"Max scans (1-100, default: 25)"},"status":{"type":"string","maxLength":20,"description":"Filter by status (queued, running, completed, failed)"}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":108,"tokensAfter":108},{"name":"lookup_cve","fixed":{"name":"lookup_cve","description":"Get full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.","inputSchema":{"type":"object","required":["cve_id"],"properties":{"cve_id":{"type":"string","pattern":"^CVE-\\d{4}-\\d{4,}$","maxLength":20,"description":"CVE identifier in format CVE-YYYY-NNNNN (e.g., CVE-2024-3400)"}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":124,"tokensAfter":124},{"name":"lookup_ip_reputation","fixed":{"name":"lookup_ip_reputation","description":"Look up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Accepts IPv4 or IPv6 (the Shield network sees both).","inputSchema":{"type":"object","required":["ip"],"properties":{"ip":{"type":"string","pattern":"^(\\d{1,3}(\\.\\d{1,3}){3}|[0-9A-Fa-f:]{2,45})$","maxLength":45,"description":"IPv4 (e.g., 1.2.3.4) or IPv6 (e.g., 2606:4700::1) address to look up"}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":128,"tokensAfter":128},{"name":"search_cves","fixed":{"name":"search_cves","description":"Search for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.","inputSchema":{"type":"object","required":["query"],"properties":{"query":{"type":"string","maxLength":200,"description":"Search keyword (CVE ID, technology name, or description)"},"is_kev":{"enum":["true","false"],"type":"string","description":"Only show CVEs in CISA KEV catalog"},"severity":{"enum":["CRITICAL","HIGH","MEDIUM","LOW"],"type":"string","description":"Filter by severity"},"has_exploit":{"enum":["true","false"],"type":"string","description":"Only show CVEs with public exploits"}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":174,"tokensAfter":174}],"toolsChanged":11,"tokensSaved":0,"todo":[],"note":"Deterministic fixes. Changes marked verify need a human look before shipping (renames, inferred annotations, inferred types, removed text). Parameter descriptions in `todo` need to be written by someone who knows the API."}