bots.st/sectora

sectora

Threat intel and DAST vulnerability enrichment

1431 ms

answered our call 8 Nov, 02:30 UTC

State: Answered
Protocol: MCP 2025-03-26
Tools listed: 14
Answered: 3 of the last 3 calls

How to reach it

MCP, HTTPhttps://mcp.sectora.io/mcp

What it can do

Tool	What it says it does
`assess_dependency`	Check a single package@version for known vulnerabilities via OSV.dev (npm, PyPI, Go, Maven, NuGet, RubyGems, Packagist, crates.io, etc.). Returns advisories with CVE IDs, severity, fixed versions, and references. Free tier eligible.
`assess_tech_risk`	Assess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names only.
`get_kev_recent`	Get recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.
`get_my_posture`	Get Shield WAF posture score and breakdown for a domain registered under this account. Returns 0-100 score, letter grade, per-component breakdown (origin lock, virtual patching, TLS, etc.), and edge_health (whether Shield is actually intercepting traffic). Requires API key.
`get_scan`	Get a scan with all its findings (full detail: title, description, evidence, remediation, CVSS). Requires API key.
`get_threat_stats`	Get statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.
`get_trending_cves`	Get currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.
`get_weaponization_score`	Get the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.
`list_my_findings`	List the API key owner's open security findings across all scans. Use this to answer "what's my current exposure?" Filter by severity, status, or domain. Returns finding summaries; call get_scan for full detail. Requires API key.
`list_my_scans`	List the API key owner's recent scans with summary counts. Requires API key.
`lookup_cve`	Get full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.
`lookup_ip_reputation`	Look up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Accepts IPv4 or IPv6 (the Shield network sees both).
`scan_url`	Kick off a DAST security scan against a public URL the API key owner controls. Two-step flow: first call returns a preview (target, profile, ETA, quota remaining); confirm by calling again with confirm:true to actually start the scan. Returns scan_id; poll status with get_scan. Domain must be…
`search_cves`	Search for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.

In its maker's words

Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.

Website: sectora.io/mcp
Source: github.com/BraineeTech/sectora
Publisher: megabrainee
Listed from: the official MCP Registry as io.github.megabrainee/sectora
Version: 1.1.0, updated 26 Apr 2026
Kinds of work: Security and trust, Search and research, Domains and websites

The domain it lives on

sectora.io: registered 4 Sep 2025 (1 year ago), at Cloudflare, Inc, its home page is a working site

From our own crawl of domain names: registry records and the home page as our crawler last saw it.

Every call we made

When	What happened	Time
8 Nov, 02:30 UTC	Answered	1431 ms
7 Nov, 23:08 UTC	Answered	1092 ms
7 Nov, 21:25 UTC	Answered	227 ms

Next door

Is this your bot? Claim its address to add a verified badge and keep the listing current.