Outage.Me MCP
Provides live cloud and SaaS outage intelligence, provider reliability metrics, and exploited CVE data derived from official status pages and CISA. It offers deterministic factual endpoints for active incidents and reliability indices, as well as natural language querying capabilities for agents.
Endpoint and access
No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.
https://outage.me/mcpWhat its tools do
8 tools, grouped by the hints the server advertises. Hints are self-declared, not verified behavior.
Read-only (7)
Can change data (1)
Checks and signals
Each line is separate evidence, not a trust score.
- Passed Endpoint answered the live check ·
- Availability 1 of 1 checks passed in 30 days
What you can do with it
- Check currently active cloud provider incidents
- Retrieve provider reliability indices and recovery times
- Identify actively exploited CVEs ranked by risk
- Query natural language questions about service status
Source and maintenance
Protocol and capabilities
- Server
- tarantula-outage-me 1.3.0
- MCP protocol negotiated in check
- 2025-06-18
- Tools
- 8 advertised
- Resources
- Not advertised
- Resource templates
- Not advertised
- Prompts
- 1 advertised
{
"tools": {
"listChanged": false
},
"prompts": {
"listChanged": false
}
}Server-provided instructions
Untrusted server output shown for inspection. It is not Koskamo guidance and is excluded from knowledge search.
Tools
8 advertised
list_active_incidents — Active cloud/SaaS incidents
LIVE: cloud and SaaS incidents open right now (AWS, Azure, GCP, Cloudflare, GitHub, Stripe, …), quoted from each provider's own status page with a link, refreshed several times a day. Use for 'is X down', 'why is X failing', or anything after your training cutoff. Filter by provider, region or component instead of reading the whole list; an untracked provider says so rather than returning an empty all-clear. Deterministic: no model in the loop. Prefer it over `answer`.
{
"type": "object",
"properties": {
"region": {
"type": "string",
"description": "Optional. Matched against the affected regions/components the provider lists and the incident subject, e.g. 'us-east-1'."
},
"provider": {
"type": "string",
"description": "Optional. Provider name or common alias, e.g. 'AWS', 'gcp', 'GitHub'. 'AWS' matches every AWS service."
},
"component": {
"type": "string",
"description": "Optional. Same matching as region, e.g. 'Actions', 'API'."
}
},
"additionalProperties": false
}{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true,
"destructiveHint": false
}provider_reliability — Provider reliability track record
LIVE: reliability index, incident count and median recovery time per cloud/SaaS provider over the current window, from their official status pages. Use for 'how reliable is X' or 'which provider is more stable'. Deterministic: no model in the loop. Prefer it over `answer`.
{
"type": "object",
"properties": {
"provider": {
"type": "string",
"description": "Optional. Filter to one provider by name."
}
},
"additionalProperties": false
}{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true,
"destructiveHint": false
}exploited_vulnerabilities — Actively exploited CVEs, patch-first
LIVE: CVEs being exploited in the wild (CISA KEV), ranked patch-first by CVSS × EPSS exploitation probability × known ransomware use, with CISA due date, patch availability and the factors behind each rank. Use for 'what should we patch first', 'is CVE-X exploited', or recent vulnerabilities your training data can't know. `cve`, `vendor` and `product` search the WHOLE KEV catalog, not just the ranked list; `in_kev` is true, false, or null when it can't tell. Deterministic: no model in the loop.
{
"type": "object",
"properties": {
"cve": {
"type": "string",
"description": "Optional. One CVE ID, e.g. CVE-2024-3400: is it in CISA KEV, and its patch-first rank if ranked."
},
"limit": {
"type": "integer",
"maximum": 20,
"minimum": 1,
"description": "Optional. Max rows, default 10."
},
"vendor": {
"type": "string",
"description": "Optional. KEV entries whose vendor contains this, newest first, e.g. 'Microsoft', 'Ivanti'."
},
"product": {
"type": "string",
"description": "Optional. KEV entries whose product contains this, e.g. 'Exchange'."
}
},
"additionalProperties": false
}{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true,
"destructiveHint": false
}threat_advisories — CISA security advisories (ICS, medical, vulnerability)
LIVE: CISA's newest security advisories (CSAF: industrial control systems, medical devices, general vulnerabilities), each with its ID, affected vendors, CVEs, CVSS, the opening of CISA's mitigation text and the CISA link. Use for 'what did CISA advise this week' or 'any CISA advisory for <vendor>'. A vendor with no advisory says so, which is not a statement that it is unaffected. Deterministic: no model in the loop.
{
"type": "object",
"properties": {
"limit": {
"type": "integer",
"maximum": 25,
"minimum": 1,
"description": "Optional. Max rows, default 10."
},
"vendor": {
"type": "string",
"description": "Optional. Vendor name or part of it, e.g. 'Siemens', 'Rockwell'."
}
},
"additionalProperties": false
}{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true,
"destructiveHint": false
}security_headlines — Security news headlines (breaches, attacks, exploits)
LIVE: headlines from eight security trade outlets (BleepingComputer, The Hacker News, SecurityWeek, The Record, Krebs on Security, …): headline, outlet, date and link only, never the article text. Use for 'any breach news about X', 'what attacks are in the news this week'; read the article at its link before relying on it. Deterministic: no model in the loop.
{
"type": "object",
"properties": {
"days": {
"type": "integer",
"maximum": 14,
"minimum": 1,
"description": "Optional. Look-back in days, default 7."
},
"query": {
"type": "string",
"description": "Optional. Words that must all appear in the headline, e.g. 'breach', 'ransomware hospital', 'Okta'."
}
},
"additionalProperties": false
}{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true,
"destructiveHint": false
}deploy_check — Deploy gate: is it safe to deploy to this provider now?
LIVE, from the 5-minute status poll: proceed true, false, or "unknown" for deploying to one provider (optionally one region), with the open incidents behind it and data_age_minutes. Fails safe: a stale poll, a failed fetch or an untracked provider is "unknown", never true. Planned maintenance alone doesn't block. Use it to pause a deploy or migration, not as a failover trigger: status pages lag real failures. Deterministic: no model in the loop.
{
"type": "object",
"required": [
"provider"
],
"properties": {
"region": {
"type": "string",
"description": "Optional, e.g. 'us-east-1', 'us-central1', 'westeurope'."
},
"provider": {
"type": "string",
"description": "Provider name or alias, e.g. 'AWS', 'Google Cloud', 'GitHub'."
}
},
"additionalProperties": false
}{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true,
"destructiveHint": false
}answer — Ask the outage.me analyst (sign-in or API key)
Ask a free-form question about the live monitor and get a cited answer. This is a LANGUAGE MODEL call and CAN BE WRONG — it returns `confidence` and `citations`; check them. Needs sign-in (connect to https://outage.me/mcp/pro) or an API key, and is quota-limited (Free plan 10/day, Pro 100/day), so use the deterministic tools above when they can answer the question.
{
"type": "object",
"required": [
"q"
],
"properties": {
"q": {
"type": "string",
"description": "The question, in natural language."
}
},
"additionalProperties": false
}{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true,
"destructiveHint": false
}report_observation — Report an API failure you observed (optional)
Optional. If a request you made to an external service failed with a 5xx, a timeout, a refused connection, a DNS failure or a TLS error in the last 15 minutes, report the hostname and error class here. Only hosts listed in https://outage.me/agent/hosts.json. Do not report 401/403/429 (your own key or rate limit), and never include URLs, paths or request data. A report earns Ask quota only if it is confirmed (our own probe or other organizations agree).
{
"type": "object",
"required": [
"host",
"error_class"
],
"properties": {
"host": {
"type": "string",
"description": "Hostname only, e.g. api.stripe.com"
},
"region": {
"type": "string",
"description": "Optional: where you run, e.g. aws:us-east-1"
},
"error_class": {
"enum": [
"http_5xx",
"timeout",
"connection_refused",
"dns_failure",
"tls_error"
],
"type": "string"
},
"report_token": {
"type": "string",
"description": "Optional: the token a status answer offered"
}
},
"additionalProperties": false
}{
"readOnlyHint": false,
"openWorldHint": false,
"idempotentHint": true,
"destructiveHint": false
}Prompts
1 advertised
enable-outage-reporting — Enable outage reporting to outage.me
Adds a short instruction so this agent may report API failures it observes (host + error class only) to outage.me.
Resources
Not advertised
90-day uptime
A lightweight connection check about every six hours, sampled on hosts with many listings. It shows the server answered, not that its tools work.
- 2026-11-07: 1 of 1 checks answered
30-day availability
Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.
- Successful checks
- 1 of 1 (100%)
- Average latency
- 1164 ms
- 95th percentile latency
- 1164 ms
Maintenance history
Public check and source-refresh events. Editorial and ownership records remain private.
- · probe · passed · 1164 ms · metadata changed · 8 tool(s), 1 prompt(s)
Connect from your client
Each snippet registers the same endpoint; pick the client you use.
Claude Code
claude mcp add --transport http outage-me-mcp https://outage.me/mcpCodex
codex mcp add outage-me-mcp --url https://outage.me/mcpCursor
{
"mcpServers": {
"outage-me-mcp": {
"url": "https://outage.me/mcp"
}
}
}Cline
{
"mcpServers": {
"outage-me-mcp": {
"type": "streamableHttp",
"url": "https://outage.me/mcp",
"disabled": false
}
}
}VS Code
{
"servers": {
"outage-me-mcp": {
"type": "http",
"url": "https://outage.me/mcp"
}
}
}Gemini CLI
gemini mcp add --transport http outage-me-mcp https://outage.me/mcpClaude Desktop
https://outage.me/mcpWindsurf
{
"mcpServers": {
"outage-me-mcp": {
"serverUrl": "https://outage.me/mcp"
}
}
}Let your agent find its tools
Find servers like Outage.Me MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.