Skip to main content
Glama
etpjfstszv

CVE-Search MCP Server

by etpjfstszv

CVE-Search MCP Server


CVE-SEARCH_MCP

A Model Context Protocol (MCP) server for querying the CVE-Search API. This server provides comprehensive access to CVE-Search, browse vendor and product、get CVE per CVE-ID、get the last updated CVEs.

Related MCP server: Vulnerability Registry MCP Server

Requirements

  • python 3.10+

  • uv

  • Cline、Roo Code etc

Tools

  • To get a JSON with all the vendors

  • To get a JSON with all the products associated to a vendor

  • To get a JSON with all the vulnerabilities per vendor and a specific product

  • To get a JSON of a specific CVE ID

  • To get a JSON of the last 30 CVEs including CAPEC, CWE and CPE expansions

  • To get more information about the current databases in use and when it was updated

Quick Start

  1. Git clone this repository

git clone https://github.com/roadwy/cve-search_mcp.git
  1. Install the dependencies

cd cve-search_mcp
uv sync

3.Add to your mcp client(vscode with cline/roo code) configuration file, modify the "YOU_CVE_SEARCH_MCP_DIR_PATH" as you self dir.

    "cve-search_mcp": {
      "command": "uv",
      "args": [
        "--directory",
        "YOU_CVE_SEARCH_MCP_DIR_PATH",
        "run",
        "main.py"
      ],
      "disabled": false,
      "autoApprove": []
    }

Reference

https://github.com/cve-search/cve-search

Related MCP Connectors

Related MCP Servers

  • F
    license
    A
    quality
    D
    maintenance
    Enables querying and analyzing a legacy, file-based vulnerability registry via MCP tools for CVE lookup, search, vendor navigation, and aggregate statistics.
    5
    -
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables querying CVE vulnerability data from the NIST National Vulnerability Database, including CVE lookup, product/version search via CPE filters, CVSS severity scores, and recent high-severity disclosures.
    20 npm
    MIT
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables users to browse vendors and products, retrieve vulnerabilities by CVE ID, fetch the latest CVEs with CAPEC/CWE/CPE expansions, and inspect database update information through the CVE-Search API.
    -