Red Hat Security Data API MCP Server
Provides tools for querying Red Hat Security Data API, including searching CSAF advisories, retrieving full CSAF documents, searching CVEs, getting CVE details, listing OVAL streams, and obtaining OVAL stream data for products like RHEL9.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Red Hat Security Data API MCP ServerWhat are the recent CVEs affecting RHEL 9?"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Red Hat Security Data API MCP Server
A Model Context Protocol (MCP) server that gives LLMs like Claude access to the Red Hat Security Data API. Query CSAF advisories, CVEs, and OVAL stream data through natural language.
What It Does
This server exposes six tools that wrap the Red Hat Security Data API v1.0:
Tool | Description |
| Search CSAF advisory documents by date, severity, CVE, package, or RHSA ID |
| Get the full CSAF document for a specific advisory |
| Search CVEs by date, severity, CVSS score, CWE, package, or product |
| Get full CVE details including affected releases and mitigations |
| List available OVAL v2 stream files |
| Get OVAL stream data for a specific product (e.g. RHEL9) |
Quick Start
npm install
npm run build
npm startThe server runs over stdio using the MCP protocol. See the docs below for connecting it to Claude Desktop or other MCP clients.
Documentation
Building and Running -- Build from source, container (Podman), and environment variables
Claude Desktop / Claude Code Setup -- Configuration for MCP clients
Tools Reference -- Parameters and descriptions for all six tools
Project Structure
src/
index.ts MCP server entry point and tool registration
api-client.ts HTTP client for the Red Hat Security Data API
tools/
csaf.ts search_csaf, get_csaf_details
cve.ts search_cves, get_cve_details
oval.ts list_oval_streams, get_oval_stream
Containerfile Multi-stage production build
build.sh Container image build script (Podman)
podman-compose.yml Local testing configuration (podman compose)License
See LICENSE.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Query and retrieve information about various adversarial tactics and techniques used in cyber atta…
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/dmc5179/redhat-security-data-api-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server