mcp-nvd

by marcoeg

Overview Schema Source Related Servers Discussions Admin

Python

Remote

Related Servers

Alternatives to mcp-nvd

No user-submitted related servers found.

Related Servers

vuln-nist-mcp-server
Security Penetration Testing
HaroldFinchIFT
A
license
Not graded
quality
D
maintenance
A Model Context Protocol (MCP) server for querying the NIST National Vulnerability Database (NVD) API, enabling search and retrieval of CVE details, temporal context, and KEV catalog entries.
Updated a year ago (2025-09-23 20:10 UTC)
15
MIT
NIST NVD MCP Server
Government Data Security
Cyreslab-AI
A
license
A
quality
D
maintenance
Enables AI agents to search, retrieve, and analyze vulnerability data from the NIST National Vulnerability Database through a comprehensive Model Context Protocol server.
Updated a year ago (2025-06-08 15:03 UTC)
8
8
MIT
cve-search_mcp
Security Open Data Search
roadwy
A
license
B
quality
D
maintenance
A Model Context Protocol (MCP) server for querying the CVE-Search API. This server provides comprehensive access to CVE-Search, browse vendor and product、get CVE per CVE-ID、get the last updated CVEs.
Updated a year ago (2025-07-26 14:17 UTC)
6
106
MIT
MCP NVD Server
Monitoring Security Documentation Access
gkhays
A
license
B
quality
D
maintenance
A Model Context Protocol server that retrieves CVE information from the National Vulnerability Database, allowing AI models to access up-to-date vulnerability data.
Updated a year ago (2025-05-16 20:56 UTC)
1
7
Apache 2.0
CIRCL CVE SEARCH MCP Server
Security Open Data Research & Data
Cyreslab-AI
A
license
Not graded
quality
D
maintenance
A Model Context Protocol (MCP) server for accessing the CIRCL CVE SEARCH API, providing comprehensive vulnerability and security information.
Updated a year ago (2025-06-04 15:18 UTC)
10
MIT
MCP Vulnerability Checker
Security Testing & QA Tools
firetix
A
license
A
quality
D
maintenance
A Model Context Protocol server providing security vulnerability intelligence tools including CVE lookup, EPSS scoring, CVSS calculation, exploit detection, and Python package vulnerability checking.
Updated a year ago (2025-05-23 02:32 UTC)
8
9
MIT

Deploy Server

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

B3/5.0

Scored 2026-04-18 11:00 across 2 tools

Disambiguation5/5

The two tools have clearly distinct purposes: get_cve retrieves a specific CVE by ID, while search_cve finds CVEs by keyword. There is no overlap in functionality, making it easy for an agent to choose the correct tool based on whether it needs a specific item or a broader search.

Naming Consistency5/5

Both tools follow a consistent verb_noun pattern (get_cve and search_cve), using the same base noun 'cve' and descriptive verbs that clearly indicate their actions. This consistency enhances readability and predictability.

Tool Count2/5

With only 2 tools, the server feels thin for the domain of CVE management, as it lacks essential operations like filtering by date, severity, or vendor, or updating/creating entries. While the tools cover basic retrieval and search, the scope is incomplete for typical security workflows.

Completeness2/5

The tool surface is severely incomplete for CVE management, missing critical operations such as filtering by parameters like date range or CVSS score, handling CVE updates or annotations, and providing bulk operations. This will likely cause agent failures when more complex queries or actions are needed.