Highest EPSS Scores Across All CVEs
epss/top-scores
The CVEs with the highest Exploit Prediction Scoring System (EPSS) scores today, highest first: the probability each is exploited in the wild in the next 30 days and its percentile. Choose how many to return (1 to 100), page through the top 10,000 of the ranking with an offset, rank by probability or by percentile, and optionally keep only CVEs scoring above a minimum probability. The answer also states the total number of CVEs matching. Scores and percentiles are decimal strings. EPSS is maintained by the Forum of Incident Response and Security Teams (FIRST), https://www.first.org/epss, passed through unmodified and served by Eden Engine; not an official FIRST product.
Price
$0.0026 per call
You pay the price shown. If a call turns out to cost more than its quote, you pay the actual price, capped at twice the quote. No monthly minimum. Top-ups start at $0.50.
Data source
Forum of Incident Response and Security Teams (FIRST)
EPSS scores come from the Exploit Prediction Scoring System (EPSS), maintained by the Forum of Incident Response and Security Teams (FIRST), https://www.first.org/epss, which asks users to credit EPSS and FIRST. Passed through unmodified and served by Eden Engine; this is not an official FIRST product, and FIRST does not endorse it.
Use it
Five steps: search, inspect, learn, run, settle. No per-tool setup; your agent reaches this tool through the meta-tools it already has.
Connect once and your AI can find and run this tool, and any other it needs.
// 1. search: find the tool
omnial_search({ query: "what you need" })
// 2. inspect: price and input schema
omnial_inspect({ tool: "epss/top-scores" })
// 3. learn: read the usage guide at runtime
omnial_learn({ tool: "epss/top-scores" })
// 4. run: price the exact call first, then run it
omnial_execute({ tool: "epss/top-scores", input: { /* see input_schema */ }, dry_run: true })
omnial_execute({ tool: "epss/top-scores", input: { /* ... */ } })
// 5. settle: the call is charged when it finishes, nothing to doNot connected yet? Point your MCP client at https://mcp.eden-engine.com/mcp, then copy a config for your client.
Pricing
Every charge this tool can incur.
| Charge | Price |
|---|---|
Per call | $0.0026 |
- Updated
- Oct 26, 2026
Input and output schemas
Input schema
{
"type": "object",
"required": [
"limit"
],
"properties": {
"limit": {
"type": "integer",
"maximum": 100,
"minimum": 1,
"description": "How many scores to return, 1 to 100."
},
"order": {
"enum": [
"!epss",
"!percentile"
],
"type": "string",
"default": "!epss",
"description": "Rank by probability (!epss, the default) or by percentile (!percentile), highest first."
},
"offset": {
"type": "integer",
"default": 0,
"maximum": 10000,
"minimum": 0,
"description": "How many scores to skip, to page through the first 10,000 ranks, 0 to 10000 (default 0). FIRST states the API is for lookup, not bulk access."
},
"min_epss": {
"type": "number",
"maximum": 1,
"minimum": 0,
"description": "Optional. Keep only CVEs whose probability is above this value, for example 0.9."
}
},
"additionalProperties": false
}Output schema
{
"type": "object",
"required": [
"total",
"offset",
"limit",
"data"
],
"properties": {
"data": {
"type": "array",
"items": {
"type": "object",
"required": [
"cve",
"epss",
"percentile",
"date"
],
"properties": {
"cve": {
"type": "string",
"description": "CVE identifier."
},
"date": {
"type": "string",
"description": "Date the score was published, YYYY-MM-DD."
},
"epss": {
"type": "string",
"description": "Probability, as a decimal string between 0 and 1, that the CVE is exploited in the wild in the next 30 days."
},
"percentile": {
"type": "string",
"description": "Share of all scored CVEs with an EPSS score at or below this one, as a decimal string between 0 and 1."
}
},
"additionalProperties": true
},
"description": "The scores."
},
"limit": {
"type": "integer",
"description": "Most scores the page could hold."
},
"total": {
"type": "integer",
"description": "Scores matching the query in the whole data set."
},
"offset": {
"type": "integer",
"description": "Index of the first score returned."
},
"status": {
"type": "string",
"description": "Service status, OK on success."
}
},
"additionalProperties": true
}