← MCP Security Catalog

Defense MCP 27b0db488d8c0a5363a4c4ad7900ad2f0bad8462

source_git · defensedotcom/defense-mcp-claude-extension · latest release

Verified with no proven findings
Security result
16
Observed tools
—
Version rating
—
Change risk

Independent inventory

Observed 2026-08-25T10:35:34.749Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
generate_training_questionsGenerate training questions based on current threats or specific threat types
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "threat_id": {
      "description": "Specific threat ID to base questions on",
      "type": "string"
    },
    "threat_type": {
      "description": "Threat category (ransomware, malware, phishing, vulnerability_management, network_security, general)",
      "type": "string"
    },
    "difficulty": {
      "default": "intermediate",
      "description": "Difficulty level",
      "type": "string",
      "enum": [
        "beginner",
        "intermediate",
        "advanced",
        "all"
      ]
    },
    "count": {
      "default": 3,
      "description": "Number of questions (1-10)",
      "type": "number",
      "minimum": 1,
      "maximum": 10
    }
  }
}
——
get_biggest_risksGet the biggest security risks based on risk score and other factors
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {}
}
——
get_latest_detectionsGet the latest detection events from the last N days, optionally filtered by threat ID
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "days": {
      "default": 1,
      "description": "Number of days to look back (1-365)",
      "type": "number",
      "minimum": 1,
      "maximum": 365
    },
    "threat_id": {
      "description": "Specific threat ID to filter detections for",
      "type": "string"
    }
  }
}
——
get_new_threatsGet new security threats from the last N days
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "days": {
      "default": 1,
      "description": "Number of days to look back (1-365)",
      "type": "number",
      "minimum": 1,
      "maximum": 365
    }
  }
}
——
get_security_awareness_briefGenerate a security awareness briefing based on current threat landscape
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {}
}
——
get_threat_details_with_contextGet comprehensive threat details including assets, users, and detections
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "threat_id": {
      "type": "string",
      "description": "Threat ID to get details for"
    }
  },
  "required": [
    "threat_id"
  ]
}
——
get_threat_to_remediate_firstDetermine which threat should be remediated first
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "days": {
      "default": 1,
      "description": "Number of days to look back (1-365). Note: Not currently used, included for API consistency.",
      "type": "number",
      "minimum": 1,
      "maximum": 365
    }
  }
}
——
get_threats_by_assigneeGet all threats assigned to a specific person
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "assignee_email": {
      "type": "string",
      "description": "Email address of the assignee"
    }
  },
  "required": [
    "assignee_email"
  ]
}
——
get_threats_by_sourceGet threats filtered by source type from the last N days. Supports aliases (e.g., 'pentest', 'm365', 'vuln scan')
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "source_type": {
      "type": "string",
      "description": "Source type to filter by (supports aliases like 'pentest', 'm365', 'vuln scan')"
    },
    "days": {
      "default": 7,
      "description": "Number of days to look back (1-365, default: 7)",
      "type": "number",
      "minimum": 1,
      "maximum": 365
    },
    "state": {
      "default": "detected",
      "description": "Threat state filter - 'detected' (open), 'remediated' (closed), null for all (default: 'detected')",
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    }
  },
  "required": [
    "source_type"
  ]
}
——
get_training_for_threatGet specific training content for a particular threat
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "threat_id": {
      "type": "string",
      "description": "Threat ID to get training for"
    }
  },
  "required": [
    "threat_id"
  ]
}
——
get_training_hintGet a hint for the current training question
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "session_id": {
      "type": "string",
      "description": "Training session ID"
    }
  },
  "required": [
    "session_id"
  ]
}
——
get_training_session_statusGet the current status of a training session
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "session_id": {
      "type": "string",
      "description": "Training session ID"
    }
  },
  "required": [
    "session_id"
  ]
}
——
get_workload_analysisAnalyze current threat workload and assignments with dashboard-like overview
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "days": {
      "description": "Days to analyze (1-365, omit for all time)",
      "type": "number",
      "minimum": 1,
      "maximum": 365
    }
  }
}
——
search_threats_by_keywordSearch for threats containing specific keywords in title or description
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "keyword": {
      "type": "string",
      "description": "Search keyword"
    },
    "include_description": {
      "default": true,
      "description": "Whether to search in description too",
      "type": "boolean"
    }
  },
  "required": [
    "keyword"
  ]
}
——
start_training_sessionStart an interactive training session
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "threat_id": {
      "description": "Threat ID for context",
      "type": "string"
    },
    "difficulty": {
      "default": "intermediate",
      "description": "Difficulty level",
      "type": "string",
      "enum": [
        "beginner",
        "intermediate",
        "advanced",
        "all"
      ]
    },
    "session_type": {
      "default": "general",
      "description": "Session type / threat category",
      "type": "string"
    }
  }
}
——
submit_training_answerSubmit an answer to a training question and optionally get the next question
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "session_id": {
      "type": "string",
      "description": "Training session ID"
    },
    "answer": {
      "type": "string",
      "description": "Your answer to the question"
    },
    "request_next": {
      "default": true,
      "description": "Whether to return the next question",
      "type": "boolean"
    }
  },
  "required": [
    "session_id",
    "answer"
  ]
}
——

Resources 0

Resource templates 0

Prompts 0

Changes from previous version

No completed comparison is available.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: 75fd06356728ccbfb9b8f75cacb5125a294b61f0aa1f36c0bd48be77608106ab

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.