EPSS Exploit Probability for CVEs
epss/cve-scores
The Exploit Prediction Scoring System (EPSS) score for one or more CVEs: the probability, between 0 and 1, that each is exploited in the wild in the next 30 days, and its percentile among all scored CVEs. Give up to 50 CVE ids separated by commas, and optionally a past date (YYYY-MM-DD) to get the scores as published on that day; otherwise the latest daily scores are returned. A CVE with no score is simply absent from the list. Scores and percentiles are decimal strings. EPSS is maintained by the Forum of Incident Response and Security Teams (FIRST), https://www.first.org/epss, passed through unmodified and served by Eden Engine; not an official FIRST product.
Price
$0.0026 per call
You pay the price shown. If a call turns out to cost more than its quote, you pay the actual price, capped at twice the quote. No monthly minimum. Top-ups start at $0.50.
Data source
Forum of Incident Response and Security Teams (FIRST)
EPSS scores come from the Exploit Prediction Scoring System (EPSS), maintained by the Forum of Incident Response and Security Teams (FIRST), https://www.first.org/epss, which asks users to credit EPSS and FIRST. Passed through unmodified and served by Eden Engine; this is not an official FIRST product, and FIRST does not endorse it.
Use it
Five steps: search, inspect, learn, run, settle. No per-tool setup; your agent reaches this tool through the meta-tools it already has.
Connect once and your AI can find and run this tool, and any other it needs.
// 1. search: find the tool
omnial_search({ query: "what you need" })
// 2. inspect: price and input schema
omnial_inspect({ tool: "epss/cve-scores" })
// 3. learn: read the usage guide at runtime
omnial_learn({ tool: "epss/cve-scores" })
// 4. run: price the exact call first, then run it
omnial_execute({ tool: "epss/cve-scores", input: { /* see input_schema */ }, dry_run: true })
omnial_execute({ tool: "epss/cve-scores", input: { /* ... */ } })
// 5. settle: the call is charged when it finishes, nothing to doNot connected yet? Point your MCP client at https://mcp.eden-engine.com/mcp, then copy a config for your client.
Pricing
Every charge this tool can incur.
| Charge | Price |
|---|---|
Per call | $0.0026 |
- Updated
- Oct 26, 2026
Input and output schemas
Input schema
{
"type": "object",
"required": [
"cve"
],
"properties": {
"cve": {
"type": "string",
"pattern": "^CVE-[0-9]{4}-[0-9]{4,19}(,CVE-[0-9]{4}-[0-9]{4,19}){0,49}$",
"maxLength": 1100,
"description": "One CVE id such as CVE-2021-44228, or up to 50 separated by commas with no spaces: CVE-2021-44228,CVE-2022-22965."
},
"date": {
"type": "string",
"format": "date",
"pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}$",
"description": "Optional. A past date, YYYY-MM-DD, to get the scores published on that day. Omit for the latest."
}
},
"additionalProperties": false
}Output schema
{
"type": "object",
"required": [
"total",
"offset",
"limit",
"data"
],
"properties": {
"data": {
"type": "array",
"items": {
"type": "object",
"required": [
"cve",
"epss",
"percentile",
"date"
],
"properties": {
"cve": {
"type": "string",
"description": "CVE identifier."
},
"date": {
"type": "string",
"description": "Date the score was published, YYYY-MM-DD."
},
"epss": {
"type": "string",
"description": "Probability, as a decimal string between 0 and 1, that the CVE is exploited in the wild in the next 30 days."
},
"percentile": {
"type": "string",
"description": "Share of all scored CVEs with an EPSS score at or below this one, as a decimal string between 0 and 1."
}
},
"additionalProperties": true
},
"description": "The scores."
},
"limit": {
"type": "integer",
"description": "Most scores the page could hold."
},
"total": {
"type": "integer",
"description": "Scores matching the query in the whole data set."
},
"offset": {
"type": "integer",
"description": "Index of the first score returned."
},
"status": {
"type": "string",
"description": "Service status, OK on success."
}
},
"additionalProperties": true
}