Skip to main content
Glama
millsks

nvd-cve-mcp-server

by millsks
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
NVD_API_KEYNoOptional API key for higher NVD rate limits.
NVD_RATE_LIMIT_REQUESTSNoOptional override for rate limit requests per window.
NVD_RATE_LIMIT_WINDOW_SECONDSNoOptional override for rate limit window in seconds.

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Features and capabilities supported by this server

Protocol revision2025-11-25

CapabilityDetails
tools
{
  "listChanged": false
}
prompts
{
  "listChanged": false
}
resources
{
  "subscribe": false,
  "listChanged": false
}
experimental
{}

Tools

Functions exposed to the LLM to take actions

NameDescription
search_cve_by_idA

Search for a CVE by ID (example: CVE-2024-1234).

search_cve_by_keywordB

Search CVEs by product name or any keyword. Optionally limit to the last days_back days (max 120).

get_recent_cvesA

Fetch recent CVEs from the last days_back days (max 120 due to NVD API limit).

search_by_severityC

Filter CVEs by severity (CRITICAL, HIGH, MEDIUM, LOW).

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Deploy Server
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

A3.5/5.0

Scored across 4 tools

Disambiguation5/5

Each tool has a clearly distinct purpose: recent CVEs, severity filter, ID lookup, and keyword search. No overlap or confusion.

Naming Consistency3/5

Mixed naming patterns: 'get_recent_cves' uses 'get' while others use 'search'. Also 'search_by_severity' lacks 'cve' unlike 'search_cve_by_id' and 'search_cve_by_keyword'.

Tool Count5/5

With 4 tools covering common CVE search methods, the count is well-scoped for the purpose without being excessive.

Completeness4/5

Core CVE queries (time, severity, ID, keyword) are covered. Missing explicit date range or CVSS score search but acceptable for a simple server.

Maintenance

ActivityInactive
ResponsivenessUnresponsive

Resources