FIRST EPSS scores API

EPSS exploit probability and percentile for one or more CVEs, highest risk first.

Ask your agent

“Call epss/scores with cve CVE-2021-44228 and summarize what comes back.”

Works in any MCP client connected to https://data.openkrill.app/mcp. Install in one line.

Path: epss/scores
MCP tool: call_endpoint
Credits: 1
Cache: 30 min

Parameters

cvestring, required	One CVE id or a comma separated list, at most 20, such as CVE-2021-44228
limitinteger, optional	1-100 rows, default 20

Response

data.resources[] uses the same keys as every other platform: author, engagement, metadata, with FIRST EPSS-only fields under extras. A failed upstream call is never billed.

MCP tool call

{
  "name": "call_endpoint",
  "arguments": {
    "path": "epss/scores",
    "params": {
      "cve": "CVE-2021-44228"
    }
  }
}

curl

curl "https://data.openkrill.app/v1/epss/scores?cve=CVE-2021-44228" \
  -H "x-api-key: YOUR_API_KEY"

Response

{
  "success": true,
  "platform": "epss",
  "endpoint": "epss/scores",
  "data": {
    "resources": [
      { "id": …, "title": …, "text": …, "url": …,
        "author": {…}, "engagement": {…},
        "metadata": {…}, "extras": {…} }
    ]
  },
  "credits_used": 1,
  "cached": false
}