Frequently Asked Questions (FAQ) about EPSS MCP Server

Q: What is the EPSS MCP Server?

A: The EPSS MCP Server retrieves CVE details from the NVD API and EPSS scores, offering comprehensive vulnerability info including descriptions, CWEs, CVSS, and EPSS percentiles.

Q: What is EPSS and why is it important?

A: EPSS (Exploit Prediction Scoring System) predicts the likelihood of a vulnerability being exploited. It’s important for prioritizing remediation efforts based on real-world risk.

Q: How do I get an NVD API key?

A: You can obtain an NVD API key by registering on the National Vulnerability Database website and following their API key request process.

Q: How do I install the EPSS MCP Server?

A: You can install it by cloning the repository, installing dependencies using pip install -r requirements.txt, and adding your NVD API key to a .env file.

Q: Can I run the EPSS MCP Server in a Docker container?

A: Yes, the server supports Docker deployment. You can build and run the Docker container using the provided Dockerfile.

Q: How do I integrate the EPSS MCP Server with VS Code?

A: You can integrate it by adding the server configuration to your VS Code settings.json file and ensuring the MCP server is active in the Microsoft Copilot Labs extension.

Q: What is the role of MCP in the EPSS MCP Server?

A: MCP (Model Context Protocol) standardizes how applications provide context to LLMs, enabling the server to seamlessly integrate with other security tools.

Q: Can I use the EPSS MCP Server with Open-WebUI?

A: Yes, you can run the EPSS MCP Server in Open-WebUI by building and running the Docker container and configuring the appropriate system prompt.

Q: How does the EPSS MCP Server enhance vulnerability management?

A: It enhances vulnerability management by providing real-time vulnerability insights, automating vulnerability assessment, and streamlining remediation workflows.

Q: What license is the EPSS MCP Server project released under?

A: This project is licensed under the MIT License.