NHS Cyber Alerts MCP Server

NHS Digital Cyber Alerts

Security advisories and threat alerts from the NHS Digital Data Security Centre. No authentication required.

Alert Severity Levels

• Critical — Actively exploited or imminent threat requiring immediate action.
• High — Significant risk, patch or mitigate within days.
• Medium — Moderate risk, apply mitigations within normal patch cycles.
• Low — Informational, awareness and long-term planning.

Alert Types

• Cyber Alert (CC) — Alerts about specific vulnerabilities, threats, or incidents.
• Advisory (AV) — General security guidance and best-practice recommendations.

Response Structure

Each alert includes id, title, publishedDate, severity, threatType, summary, and url linking to the full advisory on the NHS Digital website.

Gotchas

• The list endpoint returns all alerts; there is no server-side pagination.
• Individual alert detail uses the threatId query parameter on the collection endpoint; path-style /CyberAlert/{id} returns 404.