CVE-Search MCP Server
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
CVE-Search MCP Server
A Model Context Protocol (MCP) server for querying the CVE-Search API. This server provides comprehensive access to CVE-Search, browse vendor and product、get CVE per CVE-ID、get the last updated CVEs.
Related MCP server: Vulnerability Registry MCP Server
Requirements
python 3.10+
uv
Cline、Roo Code etc
Tools
To get a JSON with all the vendors
To get a JSON with all the products associated to a vendor
To get a JSON with all the vulnerabilities per vendor and a specific product
To get a JSON of a specific CVE ID
To get a JSON of the last 30 CVEs including CAPEC, CWE and CPE expansions
To get more information about the current databases in use and when it was updated
Quick Start
Git clone this repository
git clone https://github.com/roadwy/cve-search_mcp.gitInstall the dependencies
cd cve-search_mcp
uv sync3.Add to your mcp client(vscode with cline/roo code) configuration file, modify the "YOU_CVE_SEARCH_MCP_DIR_PATH" as you self dir.
"cve-search_mcp": {
"command": "uv",
"args": [
"--directory",
"YOU_CVE_SEARCH_MCP_DIR_PATH",
"run",
"main.py"
],
"disabled": false,
"autoApprove": []
}Reference
This server cannot be deployed
Maintenance
Related MCP Connectors
Read-only vulnerability intelligence: CVEs, exploitation evidence, fixes and product matches.
Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables searching the NIST NVD for CVEs, retrieving full CVE details, checking software for known vulnerabilities, and searching the CPE database.1MIT
- AlicenseAqualityDmaintenanceEnables querying and analyzing a legacy, file-based vulnerability registry via MCP tools for CVE lookup, search, vendor navigation, and aggregate statistics.5ISC
- AlicenseNot gradedqualityBmaintenanceEnables querying CVE vulnerability data from the NIST National Vulnerability Database, including CVE lookup, product/version search via CPE filters, CVSS severity scores, and recent high-severity disclosures.394 npmMIT
- FlicenseNot gradedqualityAmaintenanceEnables users to browse vendors and products, retrieve vulnerabilities by CVE ID, fetch the latest CVEs with CAPEC/CWE/CPE expansions, and inspect database update information through the CVE-Search API.-