Skip to main content
Glama
derya879

CVE-Search MCP Server

by derya879

CVE-Search MCP Server


CVE-SEARCH_MCP

A Model Context Protocol (MCP) server for querying the CVE-Search API. This server provides comprehensive access to CVE-Search, browse vendor and product、get CVE per CVE-ID、get the last updated CVEs.

Related MCP server: CVE-Search MCP Server

Requirements

  • python 3.10+

  • uv

  • Cline、Roo Code etc

Tools

  • To get a JSON with all the vendors

  • To get a JSON with all the products associated to a vendor

  • To get a JSON with all the vulnerabilities per vendor and a specific product

  • To get a JSON of a specific CVE ID

  • To get a JSON of the last 30 CVEs including CAPEC, CWE and CPE expansions

  • To get more information about the current databases in use and when it was updated

Quick Start

  1. Git clone this repository

git clone https://github.com/roadwy/cve-search_mcp.git
  1. Install the dependencies

cd cve-search_mcp
uv sync

3.Add to your mcp client(vscode with cline/roo code) configuration file, modify the "YOU_CVE_SEARCH_MCP_DIR_PATH" as you self dir.

    "cve-search_mcp": {
      "command": "uv",
      "args": [
        "--directory",
        "YOU_CVE_SEARCH_MCP_DIR_PATH",
        "run",
        "main.py"
      ],
      "disabled": false,
      "autoApprove": []
    }

Reference

https://github.com/cve-search/cve-search

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables users to browse vendors and products, retrieve vulnerabilities by CVE ID, fetch the latest CVEs with CAPEC/CWE/CPE expansions, and inspect database update information through the CVE-Search API.
    -
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables querying the CVE-Search API to browse vendors and their products, retrieve vulnerabilities per vendor/product, look up specific CVE IDs, fetch the latest 30 CVEs with CAPEC, CWE and CPE expansions, and check database metadata. This gives MCP clients conversational access to public vulnerability data.
    -
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables querying the CVE-Search API to browse vendors and their products, retrieve vulnerabilities per vendor/product, fetch details for a specific CVE ID, and list the most recently updated CVEs with CAPEC, CWE, and CPE expansions. Also exposes current database status and last-update information.
    -
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables querying the CVE-Search API to browse vendors and products, retrieve vulnerabilities by vendor/product or CVE ID, fetch the latest CVEs with CAPEC/CWE/CPE details, and check database update status via MCP tools.
    -