Skip to main content
Glama
aim-sec

NVD-MCP

by aim-sec
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

NVD-MCP

A simple MCP server for searching NIST's National Vulnerability Database (NVD)

Description

Tools

  • get_recent_cves: Retrieves a list of recently modified CVEs from the NVD, optionally filtered by severity levels and a specific date range. It automatically handles large date ranges by splitting them into manageable chunks.

  • search_cves: Searches the NVD for vulnerabilities based on keywords, affected products (CPE), or specific weakness types (CWE). It supports filtering by severity and can return a compact list of results.

  • get_cve_details: Fetches detailed information for a specific CVE ID from the NVD, providing in-depth data such as CVSS scores, descriptions, and related identifiers.

Related MCP server: vuln-nist-mcp-server

Getting Started

Dependencies

  • Python 3.7+

  • mcp[cli]>=1.0.0

  • httpx>=0.27.0

Installing

Configure server.py as an stdio MCP server with your AI client:

If you have an NVD API key, add it as an environment variable

References

Inspiration, code snippets, etc.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivitySlowing
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • NVD MCP Server

    Alig1493
    A
    license
    A
    quality
    C
    maintenance
    MCP server for the NIST National Vulnerability Database — lets AI assistants search CVEs by keyword, severity, CPE, CWE, KEV status, and date range via natural language.
    2
    GPL 3.0

  • vuln-nist-mcp-server

    HaroldFinchIFT
    A
    license
    Not graded
    quality
    D
    maintenance
    A Model Context Protocol (MCP) server for querying the NIST National Vulnerability Database (NVD) API, enabling search and retrieval of CVE details, temporal context, and KEV catalog entries.
    14
    MIT

  • cvefeed-mcp

    cvefeed
    A
    license
    Not graded
    quality
    C
    maintenance
    MCP server providing vulnerability intelligence from CVEFeed.io, enabling CVE search, product subscriptions, and alert management via natural language.
    MIT

  • nvd-cve-mcp-server

    millsks
    A
    license
    A
    quality
    C
    maintenance
    MCP server that provides tools to search, filter, and retrieve CVE data from the NVD API, including by ID, keyword, severity, and recency.
    4
    MIT