How do I use CVE Risk MCP Server?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@CVE Risk MCP Server Rank these CVEs by patching priority: CVE-2023-38831 and CVE-2024-21412" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

CVE Risk MCP Server

MCP server for CVE lookups, KEV enrichment, and “what should I patch first?” ranking. It implements the MCP tools/list + tools/call flow over stdio and returns structured risk assessments per CVE.

Features

CVE detail lookups with parsed CVSS v3/v4 metrics.
CISA KEV feed enrichment (primary + mirror fallback).
EPSS-style risk scoring with reasons and a priority label.
Batch ranking for patch queues.

Tools

cve_lookup
- Inputs: cve_id, include_kev
- Output: CVE summary + KEV status + risk score
cve_rank
- Inputs: cve_ids, include_kev
- Output: ranked list (highest risk first)

Quickstart

make setup make check

Run (MCP stdio)

python -m cve_risk_mcp --stdio

Example (tools/call)

{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"cve_lookup","arguments":{"cve_id":"CVE-2023-23397"}}}

Data sources

CVE data: CIRCL Vulnerability Lookup API.
KEV data: CISA Known Exploited Vulnerabilities feed (primary URL) with fallback to the official CISA GitHub mirror.