1. Conduid
  2. Search
  3. Prescryb
MCP server · Search

Prescryb

by · github.com/konstruktoid/prescryb

MCP server for CVE/config remediation orchestration: SSH inventory, OSV/NVD lookups, CIS/DISA STIG-mapped Ansible playbook suggestions.

Unclaimed ansiblecis-benchmarkcompliancecvedisa-stigepsshacktoberfestmcpmcp-servermitre-attackmodel-context-protocolnist-cceosvpythonsecurity-automationsshvulnerability-management
InstallView source
34Low

Scored a month ago · breakdown

About Prescryb

Prescryb is an MCP server published by konstruktoid in the Search category: mCP server for CVE/config remediation orchestration: SSH inventory, OSV/NVD lookups, CIS/DISA STIG-mapped Ansible playbook suggestions.

The repository has 1 stars and 0 forks, with the last commit 22 hours ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/konstruktoid/prescryb

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (10)

check_cves(system, packages)Batch-match package versions against [OSV.dev](https://osv.dev) using its ecosystem-aware version comparison (not name-only matching). Each match is enriched with an EPSS exploitation-probability score.

Parameters not published.

fetch_advisory(cve_id)Fetch the current NVD record for one CVE - description, CVSS, CWE, references - live, not from training data.

Parameters not published.

fetch_epss(cve_ids)Batch-fetch [EPSS](https://www.first.org/epss/api) exploitation-probability scores for CVE IDs not already covered by `check_cves` (e.g. from `fetch_advisory` or a web search).

Parameters not published.

generate_playbook(system, cve_matches, compliance_areas, hosts_alias)Render a **suggest-only** Ansible playbook: CVE fixes become package-upgrade tasks, compliance areas become `roles:` references.

Parameters not published.

inventory_host(host, user="", port=22, hostname="", identity_file="", trust_unknown_host=False)SSH in, detect the distro, list installed packages with versions.

Parameters not published.

list_cce_targets()List every platform `lookup_cce` can query.

Parameters not published.

list_local_docs()List documents (Markdown/text/PDF) found under the local, gitignored `LOCAL_DOCS_DIR`.

Parameters not published.

lookup_cce(target, keyword, cce_id)Look up [NIST CCE](https://ncp.nist.gov/cce) (Common Configuration Enumeration) entries for a platform (e.g. `"rhel8"`), sourced from the community JSON conversion at [`konstruktoid/cce-web`](https://github.com/konstruktoid/cce-web).

Parameters not published.

map_compliance(area)Map a free-text topic (`"ssh"`, `"sudo"`, `"kernel modules"`, ...) to CIS/DISA STIG topic areas and, if present in the `konstruktoid.hardening` GitHub repo, the matching role - plus the MITRE ATT&CK techniques and mitigations that area addresses.

Parameters not published.

search_local_docs(query, top_k=5)RAG-style semantic search over those local documents, embedded entirely on-machine.

Parameters not published.

Ask AI

✦

Ask AI about Prescryb

Powered by Claude · Grounded in docs

I know everything about Prescryb. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Prescryb

How do I install Prescryb?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Prescryb safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Prescryb still maintained?

Yes — the last commit was 22 hours ago. The repository has 1 stars and 0 forks.