CVE MCP Server
Related Servers
Alternatives to CVE MCP Server
No user-submitted related servers found.
Related Servers
- FlicenseAqualityDmaintenanceAn MCP server that brings NIST National Vulnerability Database (NVD) intelligence directly into Claude, enabling CVE lookup, product search, and prioritized risk assessment via natural language.3-
- AlicenseAqualityBmaintenanceUnifies NVD, EPSS, CISA KEV, GitHub Advisory, and OSV into a single MCP server, enabling AI agents to query vulnerability intelligence conversationally with 23 tools for incident response, prioritization, dependency audits, and threat monitoring.41245 npm28MIT
- AlicenseNot gradedqualityBmaintenanceMCP server for querying live CISA KEV, EPSS, and enriched vulnerability feeds with full provenance. Enables natural-language access to auditable security-intelligence data from Claude Desktop and other MCP clients.MIT
- AlicenseAqualityAmaintenanceAn MCP server for vulnerability management that provides tools for automated severity and CWE classification using NLP models. It enables AI agents to query the Vulnerability Lookup API for detailed CVE information and search for security vulnerabilities across various sources.1642AGPL 3.0
- AlicenseCqualityCmaintenanceAI-powered security scanning MCP server that exposes 25+ professional tools, enabling penetration testing and security assessments through natural language interaction with AI agents like Claude Desktop.31MIT
- AlicenseNot gradedqualityBmaintenanceAI-driven penetration testing MCP server that equips Claude with 13 tools for automated reconnaissance, analysis, vulnerability validation, and exploitation.3GPL 3.0
TDQS
Scored across 28 tools
Most tools have distinct purposes, but there is redundancy: check_kev duplicates KEV status already in lookup_cve, and get_cve_summary overlaps lookup_cve plus EPSS/KEV. Overall, however, the majority of tools serve clearly different functions.
Tool names mix multiple verb styles (lookup, search, check, get, parse, scan) without a consistent mapping between verb and action type. For example, check_kev, lookup_cve, and get_cve_summary use different verbs for overlapping CVE data access, making the API harder to predict.
28 tools is heavy, and some are redundant (check_kev duplicates part of lookup_cve; get_cve_summary assembles existing tools). The number feels inflated for the actual domain and could be consolidated.
The toolset covers CVE lookup, search, EPSS, KEV, CVSS parsing, vendor advisories, exploits, ATT&CK mapping, package scanning, plus general threat intel on IPs, domains, URLs, hashes, and ransomware. Main gaps are modest (e.g., no CPE matching or Exploit-DB search), but the domain is well covered.