CIRCL CVE SEARCH MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| get_cveA | Get detailed information about a specific CVE by its ID with enhanced data analysis |
| browse_vendorA | Browse known products for a vendor, sorted by most recent vulnerability activity |
| get_cweA | Get Common Weakness Enumeration (CWE) information by ID |
| get_capecA | Get Common Attack Pattern Enumeration and Classification (CAPEC) information by ID |
| get_recent_vulnerabilitiesA | Get the most recently published/updated vulnerabilities, correlated across all sources tracked by the platform |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 5 tools
Each tool targets a distinct resource: browsing by vendor, retrieving CWE/CAPEC by ID, listing recent vulnerabilities, and fetching specific CVE details. No overlap or ambiguity between tool purposes.
All tool names follow a consistent verb_noun pattern using snake_case: browse_vendor, get_cwe, get_capec, get_recent_vulnerabilities, get_cve. The verbs (browse, get) and noun targets are uniform, making the API predictable.
Five tools is well-scoped for a read-only CVE search server. Each tool serves a clear purpose without redundancy, and the count falls comfortably within the ideal 3-15 range.
The tool surface covers core workflows: fetching individual CVEs, browsing by vendor, accessing CWE/CAPEC reference data, and retrieving recent vulnerabilities. Minor gaps exist, such as the lack of a general keyword search or a way to list CVEs by CWE ID, but these are non-essential for the server's stated purpose.