NVD MCP Server

What is NVD MCP Server?

The NVD MCP Server bridges conversational queries with the National Vulnerability Database (NVD), letting developers ask questions in plain English and get real-time vulnerability data directly inside AI-powered IDEs like Windsurf.

How to use NVD MCP Server?

Install dependencies (pip install mcp httpx python-dotenv), clone the repo, configure an NVD API key in keys.env, launch the server with python nvd_mcp.py --transport stdio, then connect an MCP client (e.g., Claude Desktop via claude_desktop_config.json). Query using natural language like "What's the scoop on CVE-2023-1234?".

Key features of NVD MCP Server

• CVE details lookup with description, CVSS score, and severity.
• Keyword search for vulnerabilities tied to technologies.
• Retrieve recent CVEs from a specified time period (e.g., past week).
• Severity filtering (e.g., list only critical vulnerabilities).

Use cases of NVD MCP Server

• Look up details for a specific CVE by asking a natural‑language question.
• Search for all vulnerabilities mentioning a particular technology or keyword.
• Stay updated on newly reported CVEs from the last week.
• Filter and prioritize the most urgent security risks by severity.

FAQ from NVD MCP Server

What are the dependencies and runtime requirements?

Python 3.8 or higher is required, along with the packages mcp, httpx, and python-dotenv.

How do I obtain and configure an NVD API key?

Request a free API key from the NVD API Key Request page, then create a keys.env file in the project root containing NVD_API_KEY=your_api_key_here.

What transport mechanisms does the server support?

The default transport is stdio for local use. For networked setups, use --transport http (with proper HTTPS security).