The endoflife.ai MCP server now has ten read-only tools. The original five answered "is this version end-of-life" and "how risky is it". The new five let an agent finish the job:
- get_kev_exposure returns every CISA Known Exploited Vulnerabilities entry attributed to a product, with the date added, the federal due date, and CISA's required-action text verbatim. The "discontinue use" entries are the ones that matter for end-of-life versions.
- get_upcoming_eol lists everything reaching end-of-life within N days, across the catalog or for a list of products.
- check_sbom takes a CycloneDX or SPDX JSON document, maps components to tracked products, scores them, and lists what it could not match rather than guessing.
- get_upgrade_path gives the supported releases with the longest runway, our recommended target, and the vendor-stated successor where one is published.
- get_edge_device_status queries the EOS Edge Device feed of firewalls, VPN gateways and ADCs, with statuses in the vocabulary of CISA BOD 26-02.
Also new: tool annotations and structured output, the site's feeds exposed as resources, three ready-made prompts (audit_stack, eol_calendar, edge_device_review), a health endpoint, and "did you mean" suggestions when a product name misses.
Install in any MCP client with npx endoflife-mcp, or point a remote-capable client at https://mcp.endoflife.ai. Every answer carries the source URL to cite. Details at https://endoflife.ai/mcp.
Top comments (0)