RAD Security

Instructions

Implementation Reference

• src/operations/cves.ts:45-51 (handler)

  The core handler function that implements the get_cve tool by fetching CVE details from the cve-search.org API using the provided CVE ID.

  export async function getCve(cveId: string): Promise<any> {
    const response = await fetch(`${BASE_URL}/cve/${encodeURIComponent(cveId)}`);
    if (!response.ok) {
      throw new Error(`Failed to get CVE ${cveId}: ${response.statusText}`);
    }
    return response.json();
  }

• src/operations/cves.ts:7-9 (schema)

  Zod schema defining the input for the get_cve tool: requires a 'cveId' string.

  export const getCveSchema = z.object({
    cveId: z.string().describe("CVE ID to retrieve information for"),
  });

• src/index.ts:466-470 (registration)

  Tool registration in the listTools handler, defining the name, description, and input schema for get_cve.

    name: "get_cve",
    description:
      "Get details for a specific CVE ID. Source: cve-search.org",
    inputSchema: zodToJsonSchema(cves.getCveSchema),
  },

• src/index.ts:1321-1329 (registration)

  Dispatch handler in the CallToolRequest switch statement that parses arguments using the schema and calls the getCve implementation.

  case "get_cve": {
    const args = cves.getCveSchema.parse(request.params.arguments);
    const response = await cves.getCve(args.cveId);
    return {
      content: [
        { type: "text", text: JSON.stringify(response, null, 2) },
      ],
    };
  }