Skip to main content
Glama
d4ngkh04w

NVD/NIST MCP server

by d4ngkh04w

Related Servers

Alternatives to NVD/NIST MCP server

No user-submitted related servers found.

    Related Servers

    • F
      license
      Not graded
      quality
      A
      maintenance
      Enables querying the CVE-Search API to browse vendors and products, retrieve vulnerabilities by vendor/product or CVE ID, fetch the latest updated CVEs with CAPEC/CWE/CPE expansions, and check current database information. It provides these capabilities through MCP tools for use in compatible clients.
      -
    • F
      license
      Not graded
      quality
      A
      maintenance
      Enables querying the CVE-Search API to browse vendors and products, retrieve vulnerabilities by vendor/product or CVE ID, fetch the latest CVEs with CAPEC/CWE/CPE details, and check database update status via MCP tools.
      -
    • A
      license
      A
      quality
      C
      maintenance
      MCP server that provides tools to search, filter, and retrieve CVE data from the NVD API, including by ID, keyword, severity, and recency.
      4
      25 PyPI
      MIT
    • F
      license
      Not graded
      quality
      A
      maintenance
      Enables querying the CVE-Search API to retrieve vendors, products, product-specific vulnerabilities, specific CVE IDs, recently updated CVEs with CAPEC/CWE/CPE expansions, and database update information. It supports natural-language access to CVE data through MCP clients.
      -
    • A
      license
      A
      quality
      D
      maintenance
      Enables querying and analyzing a legacy, file-based vulnerability registry via MCP tools for CVE lookup, search, vendor navigation, and aggregate statistics.
      5
      ISC

    TDQS

    A4.3/5.0

    Scored across 10 tools

    Disambiguation4/5

    Tool names and descriptions clearly delineate resource+action, but nvd_get_recent_cves and nvd_get_modified_cves are nearly identical except for ordering, and nvd_get_cve, nvd_get_cve_summary, and nvd_get_cves all target CVE records with overlapping semantics. The descriptions do distinguish scope and detail level, but an agent could easily misselect between the full, summary, and batch variants without careful reading.

    Naming Consistency5/5

    Every tool follows a consistent nvd_ verb_noun pattern (get, search, and entity names like cve, cves, cpe). Variants like nvd_get_cve_summary and nvd_get_cve_history extend the base name predictably. No mixed conventions or inconsistent casing.

    Tool Count5/5

    Ten tools is well within the sweet spot for a domain-specific API wrapper. Each tool maps to a distinct NVD endpoint or use case (single record, batch, search, history, CPE dictionary, CPE matches), so the surface feels scoped rather than padded.

    Completeness4/5

    The surface covers CVE retrieval (single, batch, summary, search, history, recent, modified) and CPE lookup (search, get, matches), which is core NVD functionality. Missing operations like CVE creation or modification don't apply since NVD is read-only, but there is no tool for bulk CPE dictionary listing or NVD API status, which could be minor gaps for some workflows.

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues