NVD-MCP
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@NVD-MCPsearch for recent critical vulnerabilities in Apache"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
NVD-MCP
A simple MCP server for searching NIST's National Vulnerability Database (NVD)
Description
Tools
get_recent_cves: Retrieves a list of recently modified CVEs from the NVD, optionally filtered by severity levels and a specific date range. It automatically handles large date ranges by splitting them into manageable chunks.
search_cves: Searches the NVD for vulnerabilities based on keywords, affected products (CPE), or specific weakness types (CWE). It supports filtering by severity and can return a compact list of results.
get_cve_details: Fetches detailed information for a specific CVE ID from the NVD, providing in-depth data such as CVSS scores, descriptions, and related identifiers.
Related MCP server: vuln-nist-mcp-server
Getting Started
Dependencies
Python 3.7+
mcp[cli]>=1.0.0
httpx>=0.27.0
Installing
Configure server.py as an stdio MCP server with your AI client:
If you have an NVD API key, add it as an environment variable
References
Inspiration, code snippets, etc.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseAqualityCmaintenanceMCP server for the NIST National Vulnerability Database — lets AI assistants search CVEs by keyword, severity, CPE, CWE, KEV status, and date range via natural language.2GPL 3.0
- Alicense-qualityDmaintenanceA Model Context Protocol (MCP) server for querying the NIST National Vulnerability Database (NVD) API, enabling search and retrieval of CVE details, temporal context, and KEV catalog entries.15MIT
- Alicense-qualityCmaintenanceMCP server providing vulnerability intelligence from CVEFeed.io, enabling CVE search, product subscriptions, and alert management via natural language.MIT
- AlicenseAqualityCmaintenanceMCP server that provides tools to search, filter, and retrieve CVE data from the NVD API, including by ID, keyword, severity, and recency.4MIT
Related MCP Connectors
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
MCP server for ScanMalware.com URL scanning, malware detection, and analysis.
CVE lookup via NIST NVD, CISA KEV, EPSS, and MITRE ATT&CK. 7 tools.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/aim-sec/nvd-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server