CVE MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| PORT | No | HTTP port for hosted mode, default 3000. Setting this variable or passing --http starts the hosted HTTP mode instead of stdio. | 3000 |
| PUBLIC_URL | No | Required only in hosted mode. Public HTTPS address of the server, e.g. https://cve.example.com. | |
| NVD_API_KEY | No | Optional API key that raises the NVD rate limit for the search_cves tool. Not required in either stdio or hosted mode. | |
| TOKENS_FILE | No | Optional in hosted mode. Path to the file containing people's tokens. Defaults to tokens.json next to the app. | tokens.json |
| CVE_AUTH_TOKEN | No | Required only in hosted mode. Owner token for the hosted server, at least 24 characters. | |
| OAUTH_CLIENTS_FILE | No | Optional in hosted mode. Path to the file containing registered OAuth clients. Defaults to oauth-clients.json next to the app. | oauth-clients.json |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues