CVESentry MCP (Lite)

Autonomous Local Vulnerability Scanner, Fast CVE Search Engine & Dependency Audit Plane for AI Coding Agents

CVESentry MCP gives AI coding agents (Claude Desktop, Cursor, Devin, Roo-Code) instant (<5ms) vulnerability intelligence without rate-limits or slow external API keys. It audits dependency manifests (requirements.txt, package.json), identifies vulnerable versions, and provides automated upgrade paths.

🚀 Features (Lite Edition)

• Instant Local CVE Search (search_cve): Query vulnerability records in sub-millisecond local SQLite memory with zero network dependencies.

• Dependency Manifest Auditor (audit_manifest): Parses requirements.txt and package.json, checks versions against vulnerable ranges, and calculates severity breakdowns.

• CVE Detailed Metadata (get_cve_details): Detailed CVSS score, vulnerability category, affected package version bounds, and security summaries.

• Safe Version Recommendation (get_safe_recommendation): Calculates the minimal patch version that eliminates all matching CVEs.

Related MCP server: Security Intel MCP

📦 Installation & Setup

git clone https://github.com/johannschiffer/cvesentry-mcp.git
cd cvesentry-mcp
pip install -e .

Configuration with Claude Desktop / Cursor

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "cvesentry": {
      "command": "python3",
      "args": ["-m", "cvesentry.server"]
    }
  }
}

⚡ Quick CLI Usage

# Search for a CVE or package
cvesentry search --query "aiohttp"

# Audit a requirements.txt file
cvesentry audit --file requirements.txt

💼 Upgrade to CVESentry Pro

Need enterprise security compliance for automated code generation?

• Multi-Ecosystem Engine (SQLite WAL): Full parsing for Python (pyproject.toml, Pipfile), Node (package-lock.json), Rust (Cargo.lock), and Go (go.mod).

• EPSS & CISA KEV Exploit Prioritization: Real-world Exploit Prediction Scoring System (EPSS) and CISA Known Exploited Vulnerabilities catalog integration.

• Automated Safe Version Upgrader: Automatically patches manifests while preserving semver constraints to minimize breaking changes.

• Audit Certificate Exporter: Generates formatted markdown and JSON reports for GitHub PR reviews.

• Docker & Compose Ready: Deploy as a microservice sidecar in your CI/CD cluster.

Available at Gumroad.

📄 License

MIT © Johann Schiffer