# NVD-MCP

A simple MCP server for searching NIST's National Vulnerability Database (NVD)

## Description

### Tools

- **get_recent_cves**: Retrieves a list of recently modified CVEs from the NVD, optionally filtered by severity levels and a specific date range. It automatically handles large date ranges by splitting them into manageable chunks.
- **search_cves**: Searches the NVD for vulnerabilities based on keywords, affected products (CPE), or specific weakness types (CWE). It supports filtering by severity and can return a compact list of results.
- **get_cve_details**: Fetches detailed information for a specific CVE ID from the NVD, providing in-depth data such as CVSS scores, descriptions, and related identifiers.

## Getting Started

### Dependencies

* Python 3.7+
* mcp\[cli\]>=1.0.0
* httpx>=0.27.0


### Installing

Configure server.py as an stdio MCP server with your AI client:
* [Claude Code](https://nvd.nist.gov/developers/vulnerabilities)
* [Visual Studio Code](https://code.claude.com/docs/en/mcp)
* [VSCodium/Continue](https://docs.continue.dev/customize/mcp-tools)

If you have an NVD API key, add it as an environment variable


## References 

Inspiration, code snippets, etc.
* [NVD Vulnerabilities API](https://nvd.nist.gov/developers/vulnerabilities)
* [NVD Developer Guide](https://nvd.nist.gov/developers/start-here)