cve-cache-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| lookup_cveA | Full record for one CVE by ID. Cited NVD + GHSA URLs. |
| find_for_packageA | All CVEs affecting a package. Optionally filter by ecosystem. |
| list_recent_criticalC | Recent CVEs with CVSS >= threshold. Default: 7-day high-severity feed. |
| severity_summaryA | Counts by severity bucket across the snapshot. Quick agent triage view. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 4 tools
Each tool has a clearly distinct purpose: lookup by ID, search by package, list recent criticals, and severity summary. No overlap or ambiguity.
All tool names follow a consistent verb_noun pattern in snake_case (lookup_cve, find_for_package, list_recent_critical, severity_summary).
With 4 tools, the set is concise and covers core CVE operations without being too sparse or bloated. Slightly small but appropriate for the domain.
The surface covers lookup, package search, recent criticals, and severity summary. Missing features like ecosystem-specific search or filtering on lookup are minor gaps.