Microsoft Security Release by Id or CVE (MSRC)

msrc/release-lookup

One Microsoft Security Response Center release by its id (year and month, for example 2026-Sep) or by a CVE id (for example CVE-2024-38063), which resolves to the release that contains it: the release id, title, first publication date, latest revision date (ISO 8601 UTC) and the URL of the full CVRF document. An id or CVE that Microsoft does not list is rejected as invalid input. Source: Microsoft Security Response Center (https://msrc.microsoft.com/update-guide). Modified by Eden Engine (fields renamed and reduced). Served by Eden Engine; not an official Microsoft product.

activeper callv1

Price

$0.0026 per call

You pay the price shown. If a call turns out to cost more than its quote, you pay the actual price, capped at twice the quote. No monthly minimum. Top-ups start at $0.50.

Data source

Microsoft Security Response Center

Source: Microsoft Security Response Center (MSRC) Security Update Guide, https://msrc.microsoft.com/update-guide. Modified by Eden Engine (fields renamed and reduced). Served by Eden Engine; not an official Microsoft product.

Use it

Five steps: search, inspect, learn, run, settle. No per-tool setup; your agent reaches this tool through the meta-tools it already has.

Connect once and your AI can find and run this tool, and any other it needs.

Install it Create an account

agent

// 1. search: find the tool
omnial_search({ query: "what you need" })

// 2. inspect: price and input schema
omnial_inspect({ tool: "msrc/release-lookup" })

// 3. learn: read the usage guide at runtime
omnial_learn({ tool: "msrc/release-lookup" })

// 4. run: price the exact call first, then run it
omnial_execute({ tool: "msrc/release-lookup", input: { /* see input_schema */ }, dry_run: true })
omnial_execute({ tool: "msrc/release-lookup", input: { /* ... */ } })

// 5. settle: the call is charged when it finishes, nothing to do

Not connected yet? Point your MCP client at https://mcp.eden-engine.com/mcp, then copy a config for your client.

Pricing

Every charge this tool can incur.

Charge	Price
Per call	$0.0026

Updated: Oct 26, 2026

Input and output schemas

Input schema

input_schema.json

{
  "type": "object",
  "required": [
    "id"
  ],
  "properties": {
    "id": {
      "type": "string",
      "pattern": "^(\\d{4}-[A-Za-z]{3}|CVE-\\d{4}-\\d{4,7})$",
      "description": "A release id such as 2026-Sep (year, dash, three-letter month) or a CVE id such as CVE-2024-38063."
    }
  },
  "additionalProperties": false
}

Output schema

output_schema.json

{
  "type": "object",
  "required": [
    "count",
    "releases"
  ],
  "properties": {
    "count": {
      "type": "integer",
      "description": "Releases in this answer."
    },
    "releases": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "id",
          "title",
          "initialReleaseDate",
          "currentReleaseDate",
          "cvrfUrl"
        ],
        "properties": {
          "id": {
            "type": "string",
            "description": "Release identifier, year and month, for example 2026-Sep."
          },
          "title": {
            "type": [
              "string",
              "null"
            ],
            "description": "Release title, for example September 2026 Security Updates."
          },
          "cvrfUrl": {
            "type": [
              "string",
              "null"
            ],
            "description": "URL of the full CVRF document of the release (many MB; not served by this tool)."
          },
          "currentReleaseDate": {
            "type": [
              "string",
              "null"
            ],
            "description": "Latest revision, ISO 8601 UTC."
          },
          "initialReleaseDate": {
            "type": [
              "string",
              "null"
            ],
            "description": "First publication, ISO 8601 UTC."
          }
        },
        "additionalProperties": false
      },
      "description": "The matching releases: one for a release id, normally one for a CVE."
    }
  },
  "additionalProperties": false
}