Distributed Risk desk

Connect it to your AI

Claude Code

claude mcp add --transport http desk https://www.distributedrisk.com/mcp

Claude, ChatGPT, Cursor and other apps

Add it as a custom connector with this URL (Streamable HTTP):

https://www.distributedrisk.com/mcp

Cursor, VS Code and other apps (mcp.json)

{
  "mcpServers": {
    "desk": {
      "url": "https://www.distributedrisk.com/mcp"
    }
  }
}

Tools it offers

14 tools, as the server itself reported during our check on Oct 31, 2026.

• list_notesPublished desk notes, newest first: entry number, date, title, status, topic (cyber or sanctions), readers, source class, a one-line summary, and the note's URL. Pages with limit and offset; total is the count that match
• search_notesFind published notes that mention every word of the query (a name, a list, a country, a program, a date) in the title, summary, sources or body.
• get_noteOne published note in full (Markdown), with its numbered sources and links to the official record.
• search_screening_listsSearch the Consolidated Screening List (OFAC SDN and other Treasury lists; BIS Entity, Denied Persons, Unverified and Military End User lists; State ITAR-debarred and nonproliferation lists) by name, alias or identifier
• list_ofac_actionsOFAC's recent actions, newest first: designations and removals, general licenses, FAQs, regulations and settlements, each with its date, categories and the official page. Filter by date or words in the title.
• search_kevCISA's Known Exploited Vulnerabilities catalog, newest first: CVE, vendor, product, date added, federal due date, known ransomware use, the required action, FIRST's EPSS estimate, and whether it sits in the AI and agent
• search_federal_registerSearch Federal Register rules, proposed rules, notices and presidential documents: title, type, agencies, publication and effective dates, citation, abstract and the official document link. Narrow by agency (for example
• list_travel_advisoriesUS State Department travel advisories, most recently updated first: country, level (1 to 4), the advisory's summary and the official page. Filter by country, minimum level or update date.
• get_reference_ratesThe New York Fed's reference rates: EFFR and OBFR (unsecured), SOFR, BGCR and TGCR (secured), and the SOFR averages and index (SOFRAI). With no rate, the latest of each; with a rate, its last N days, with percentiles, vo
• get_treasury_yieldsTreasury's daily par yield curve, newest first: yields by tenor from 1 month to 30 years. Ask for the last N days, and optionally only some tenors (for example ["2 Yr", "10 Yr"]).
• get_cveEverything the record says about one CVE, in one answer: the CVE.org record (description, severity, weakness, affected products, references), CISA's exploitation call (SSVC) and its KEV listing with the federal due date,
• list_cyber_advisoriesCISA's advisories, newest first: alerts, joint cybersecurity advisories (#StopRansomware, state-sponsored activity), ICS and ICS-medical advisories, and analysis reports. Each with its kind, date, summary, the CVEs it na
• list_cyber_incident_filingsCybersecurity incidents public companies report on Form 8-K, newest first: Item 1.05 (the company judged it material) and, unless excluded, Item 8.01 reports made without that judgment. Each with the company, tickers, fi
• list_ai_stack_vulnerabilitiesNew advisories against the software AI agents run on, newest and most severe first: agent frameworks (LangChain, LlamaIndex, CrewAI, n8n, Langflow), LLM gateways (LiteLLM), MCP servers and SDKs, model serving (vLLM, Olla

Questions