CIRCL CVE SEARCH MCP Server

@Cyreslab-AI

リポジトリ

基本情報

カテゴリ

開発者ツール

ライセンス

MIT license

トランスポート

stdio

作者

Cyreslab-AI

CIRCL CVE SEARCH MCP Server について

MCP server for CIRCL CVE Search API with intelligent risk assessment and comprehensive vulnerability analysis.

#mcp #cybersecurity #vulnerability #cve #risk-assessment #mcp-server

CIRCL CVE SEARCH MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "circl-cve-search": {
      "command": "npx",
      "args": [
        "@cyreslab/circl-cve-search-mcp-server"
      ]
    }
  }
}

CIRCL CVE SEARCH MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

上のボタンで一時的なサンドボックスでこのサーバーを実行し、ツール一覧を取得できます。

概要

What is CIRCL CVE SEARCH MCP Server?

The CIRCL CVE SEARCH MCP Server is a Model Context Protocol (MCP) server for accessing the CIRCL CVE SEARCH API. It provides comprehensive vulnerability and security information, making it suitable for security researchers and developers who need to query CVE, CWE, and CAPEC data programmatically.

How to use CIRCL CVE SEARCH MCP Server?

Install the package via npm and add it to your MCP client configuration using the command npx @cyreslab/circl-cve-search-mcp-server. The server exposes four tools: get_cve, browse_vendor, get_cwe, and get_capec, each with specific parameters for querying vulnerability data.

Key features of CIRCL CVE SEARCH MCP Server

Access detailed CVE information by ID.
Browse CVEs by vendor name.
Retrieve Common Weakness Enumeration (CWE) data.
Retrieve Common Attack Pattern Enumeration (CAPEC) data.
Automatic retry with exponential backoff for reliability.
Structured, readable response formatting.

Use cases of CIRCL CVE SEARCH MCP Server

Investigate a specific vulnerability by its CVE ID to understand impact and references.
Audit a vendor’s product security by browsing all CVEs associated with that vendor.
Classify vulnerabilities by weakness type using CWE data for reporting.
Study attack patterns via CAPEC data to improve threat modeling.
Integrate real-time CVE lookup into security automation pipelines.

よくある質問

What data sources does the server use?

The server uses the CIRCL CVE SEARCH API, which provides CVE data from the National Vulnerability Database (NVD), as well as CPE, CWE, and CAPEC data.

Does the API require authentication or have rate limits?

The CIRCL CVE SEARCH API is free to use and does not require authentication. Users should use it responsibly to avoid impacting the service.

What error conditions does the server handle?

The server handles invalid CVE/CWE/CAPEC ID formats, empty search queries, API rate limiting, network errors, and invalid parameters with clear, actionable error messages.

What tools are available and what parameters do they accept?

Available tools are `get_cve` (requires `cve_id`), `browse_vendor` (requires `vendor`, optional `limit` up to 50), `get_cwe` (requires `cwe_id`), and `get_capec` (requires `capec_id`).

「開発者ツール」の他のコンテンツ

BetterBugs

The BetterBugs MCP (Model Context Protocol) enables you to load BetterBugs bug reports (via report links) directly to your preferred AI Agents and developer environments with MCP Client capabilities (such as Cursor, VS C

Yocoolab

MCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools

Mcp-Warden

ermoluk

Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and databases through scoped presets; secrets stay in your OS keychain and never enter the agent's context.

Routebase

Routebase keeps your API's design, docs, contract tests, mocks and monitoring in one living OpenAPI spec so they can't drift apart. Agents work on that same source of truth, under your team's permissions.

LocalCan

Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control. Part of LocalCan, the ngrok alternative for Mac, Windows and Linux. Free plan.