Skip to content
Distributed Risk logo

Distributed Risk MCP server

Which MCP servers are Distributed Risk's own, from the official registry and from asking its own domain, whether they answer, and what they offer. A program checked each of these, nobody copied them from a product page.

read 2026-10-30

← Back to Distributed Risk

Whose server it is
  • Registry namecom.distributedrisk/deskverified in the MCP registry

The registry name sits under distributedrisk.com. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.

When we asked itchecked 2026-10-30
  • Stateanswerschecked 2026-10-30
  • Tools14
  • Server calls itselfdistributed-risk-desk
  • Server version1.5.0
  • Protocol version2025-06-18

On 2026-10-30 the server answered initialize and tools/list without a sign-in. First answer in 115 ms.

Should an agent connect itNot proven either way yet
  • Its tools do check whether a vulnerability is on the known-exploited list, but not arrange on-the-ground investigations through a partner firm.
  • Checked on 3 of the 7 days it takes to judge reliability.

Once connected

  • For "check whether a vulnerability is on the known-exploited list", the likely first call is search_kev.
  • Parameters are untyped or undescribed in 9 of 14 tools: check arguments before calling.

Said by rules from the measurements above. The likely first call is a model's pick from the tool list; read its description before relying on it.

Measured dailydaily checks: 3, the first on 2026-10-30
  • INITE MCP scoreafter a weeka score needs 7 daily checks: 3 so far
  • What an agent can do with it1 of 2 use cases
  • Answeredmeasuring3 of the 7 daily checks it takes to print a share
  • Median first answer139 ms
  • Space in an agent's context≈ 3,216 tokensthe definitions of all its tools (14), which an agent carries on every turn
  • Tool definitionsB · 89 of 100
  • Typed results0 of 14 toolsdeclared outputSchema: results come typed, read once
  • Parameters without a description: in 9 of 14

What an agent can do with it

  • not sure · check which sanctions actions name a given country
  • can do · check whether a vulnerability is on the known-exploited list
  • cannot · arrange on-the-ground investigations through a partner firm

Each of the product's use cases, put to Jev against this server's tool list: can an agent do it with these tools?

Worth a look

None of the five warning signs in these definitions.

A program checks the server once a day: initialize and tools/list, no model. Tokens are the definitions' length at about four characters a token. The grade averages six checks of every tool's name, description, schema and annotations; it says how well the tools are described, not whether they work. The score weighs what was measured and nothing else: answering (25%), doing the product's job (25%), definitions (20%), context (10%), use (10%) and how readily a client connects (10%). A part that was not measured is left out, and a hidden instruction caps the score at 40. The state of vendors' MCP servers: method and numbers →

Tools it offers14 tools · read 2026-10-30
  • list_notes

    Published desk notes, newest first: entry number, date, title, status, topic (cyber or sanctions), readers, source class, a one-line summary, and the note's URL. Pages with limit and offset; total is the count that matches, next_offset…

  • search_notes

    Find published notes that mention every word of the query (a name, a list, a country, a program, a date) in the title, summary, sources or body.

  • get_note

    One published note in full (Markdown), with its numbered sources and links to the official record.

  • search_screening_lists

    Search the Consolidated Screening List (OFAC SDN and other Treasury lists; BIS Entity, Denied Persons, Unverified and Military End User lists; State ITAR-debarred and nonproliferation lists) by name, alias or identifier (IMO, SWIFT/BIC…

  • list_ofac_actions

    OFAC's recent actions, newest first: designations and removals, general licenses, FAQs, regulations and settlements, each with its date, categories and the official page. Filter by date or words in the title.

  • search_kev

    CISA's Known Exploited Vulnerabilities catalog, newest first: CVE, vendor, product, date added, federal due date, known ransomware use, the required action, FIRST's EPSS estimate, and whether it sits in the AI and agent software stack…

  • search_federal_register

    Search Federal Register rules, proposed rules, notices and presidential documents: title, type, agencies, publication and effective dates, citation, abstract and the official document link. Narrow by agency (for example…

  • list_travel_advisories

    US State Department travel advisories, most recently updated first: country, level (1 to 4), the advisory's summary and the official page. Filter by country, minimum level or update date.

  • get_reference_rates

    The New York Fed's reference rates: EFFR and OBFR (unsecured), SOFR, BGCR and TGCR (secured), and the SOFR averages and index (SOFRAI). With no rate, the latest of each; with a rate, its last N days, with percentiles, volume and, for…

  • get_treasury_yields

    Treasury's daily par yield curve, newest first: yields by tenor from 1 month to 30 years. Ask for the last N days, and optionally only some tenors (for example ["2 Yr", "10 Yr"]).

  • get_cve

    Everything the record says about one CVE, in one answer: the CVE.org record (description, severity, weakness, affected products, references), CISA's exploitation call (SSVC) and its KEV listing with the federal due date, FIRST's EPSS…

  • list_cyber_advisories

    CISA's advisories, newest first: alerts, joint cybersecurity advisories (#StopRansomware, state-sponsored activity), ICS and ICS-medical advisories, and analysis reports. Each with its kind, date, summary, the CVEs it names and the…

  • list_cyber_incident_filings

    Cybersecurity incidents public companies report on Form 8-K, newest first: Item 1.05 (the company judged it material) and, unless excluded, Item 8.01 reports made without that judgment. Each with the company, tickers, filing and event…

  • list_ai_stack_vulnerabilities

    New advisories against the software AI agents run on, newest and most severe first: agent frameworks (LangChain, LlamaIndex, CrewAI, n8n, Langflow), LLM gateways (LiteLLM), MCP servers and SDKs, model serving (vLLM, Ollama), ML platforms…

How to connect

Add the server to your MCP client config. Claude Desktop, Cursor and most other clients read this shape:

{
  "mcpServers": {
    "desk": {
      "type": "http",
      "url": "https://www.distributedrisk.com/mcp"
    }
  }
}

Add it

Claude Code, in a terminal

claude mcp add --transport http distributedrisk https://www.distributedrisk.com/mcp

Add to CursorAdd to VS Code

claude.ai, ChatGPT and other clients: add https://www.distributedrisk.com/mcp as a custom connector in the settings.

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.