CVE-Search MCP Server
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@CVE-Search MCP Servershow vulnerabilities for microsoft windows"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
CVE-Search MCP Server
A Model Context Protocol (MCP) server for querying the CVE-Search API. This server provides comprehensive access to CVE-Search, browse vendor and product、get CVE per CVE-ID、get the last updated CVEs.
Related MCP server: CVE-Search MCP Server
Requirements
python 3.10+
uv
Cline、Roo Code etc
Tools
To get a JSON with all the vendors
To get a JSON with all the products associated to a vendor
To get a JSON with all the vulnerabilities per vendor and a specific product
To get a JSON of a specific CVE ID
To get a JSON of the last 30 CVEs including CAPEC, CWE and CPE expansions
To get more information about the current databases in use and when it was updated
Quick Start
Git clone this repository
git clone https://github.com/roadwy/cve-search_mcp.gitInstall the dependencies
cd cve-search_mcp
uv sync3.Add to your mcp client(vscode with cline/roo code) configuration file, modify the "YOU_CVE_SEARCH_MCP_DIR_PATH" as you self dir.
"cve-search_mcp": {
"command": "uv",
"args": [
"--directory",
"YOU_CVE_SEARCH_MCP_DIR_PATH",
"run",
"main.py"
],
"disabled": false,
"autoApprove": []
}Reference
This server cannot be deployed
Maintenance
Related MCP Connectors
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Defensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS
CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.
Related MCP Servers
- FlicenseNot gradedqualityAmaintenanceEnables users to browse vendors and products, retrieve vulnerabilities by CVE ID, fetch the latest CVEs with CAPEC/CWE/CPE expansions, and inspect database update information through the CVE-Search API.-
- FlicenseNot gradedqualityAmaintenanceEnables querying the CVE-Search API to browse vendors and their products, retrieve vulnerabilities per vendor/product, look up specific CVE IDs, fetch the latest 30 CVEs with CAPEC, CWE and CPE expansions, and check database metadata. This gives MCP clients conversational access to public vulnerability data.-
- FlicenseNot gradedqualityAmaintenanceEnables querying the CVE-Search API to browse vendors and their products, retrieve vulnerabilities per vendor/product, fetch details for a specific CVE ID, and list the most recently updated CVEs with CAPEC, CWE, and CPE expansions. Also exposes current database status and last-update information.-
- FlicenseNot gradedqualityAmaintenanceEnables users to query a vulnerability database for vendors, products, vulnerabilities by product, specific CVE IDs, recent CVEs with CAPEC/CWE/CPE expansions, and database update information.-