endoflife.ai — Model Context Protocol (MCP) Server 1.3.0
=======================================================

This is a machine endpoint for AI agents. It speaks MCP over the Streamable
HTTP transport (JSON-RPC 2.0 via HTTPS POST to this URL).

Connect from Claude / Cursor / VS Code / any MCP client (remote URL):

  https://mcp.endoflife.ai

or via a stdio bridge:

  {
    "mcpServers": {
      "endoflife": { "command": "npx", "args": ["mcp-remote", "https://mcp.endoflife.ai"] }
    }
  }

Tools (all read-only):
  • check_eol — Check whether a specific version of a software product is end-of-life (EOL).
  • get_risk_score — Get the proprietary EOL Risk Score (0-100) for a product version, with the four-factor breakdown (EOL recency, attack surface, CISA KEV exposure, extended support).
  • scan_stack — Audit a whole stack at once.
  • list_products — List or search the products endoflife.ai tracks (500+).
  • get_product_lifecycle — Get the full version history for one product: every tracked version/cycle with its release date, EOL date, support status, and EOL Risk Score.
  • get_kev_exposure — The exploited-vulnerability record for a product: every CVE CISA lists against it in the Known Exploited Vulnerabilities catalog, with the date added, the federal due date and CISA's required-action text verbatim (the "discontinue use" entries are the ones that matter for end-of-life versions), plus any entries from endoflife.ai's Exploited & Unpatchable feed (exploited CVEs whose affected versions will never receive a fix).
  • get_upcoming_eol — What reaches end-of-life soon.
  • get_edge_device_status — Query the EOS Edge Device Intelligence feed — firewalls, VPN gateways and appliances, ADCs, router and switch operating systems — with end-of-support status in the vocabulary of CISA BOD 26-02 (eos, within-12-months, scheduled, no-date-announced).
  • get_upgrade_path — Where to move a product version: the current version's support status and score, the supported releases with the longest remaining support, endoflife.ai's recommended target, and the vendor's stated successor where one is published (edge appliances).
  • check_sbom — Audit a CycloneDX or SPDX JSON software bill of materials.

Prompts:
  • audit_stack — Score every component of a stack, then explain what is end-of-life, what is actively exploited, and where to move.
  • eol_calendar — List what reaches end-of-life in a window, grouped by month, with the action each one needs.
  • edge_device_review — Review edge devices against CISA BOD 26-02: past end of support, within 12 months, and the KEV exposure of each.

Resources: the site's feeds (llms.txt, EOS Edge Device feed, Exploited & Unpatchable, KEV by product, edge change log).

Optional: send an "X-API-Key" header to unlock Pro limits.
Health: GET /health   ·   Docs: https://endoflife.ai/mcp   ·   API: https://endoflife.ai/api