Advertise
MCP.so
Sign In

CIRCL CVE SEARCH MCP Server

@Cyreslab-AI

Repository

Basic information

Category

Developer Tools

License

MIT license

Transports

stdio

Author

Cyreslab-AI

About CIRCL CVE SEARCH MCP Server

MCP server for CIRCL CVE Search API with intelligent risk assessment and comprehensive vulnerability analysis.

#mcp#cybersecurity#vulnerability#cve#risk-assessment#mcp-server

CIRCL CVE SEARCH MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "circl-cve-search": {
      "command": "npx",
      "args": [
        "@cyreslab/circl-cve-search-mcp-server"
      ]
    }
  }
}

CIRCL CVE SEARCH MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is CIRCL CVE SEARCH MCP Server?

The CIRCL CVE SEARCH MCP Server is a Model Context Protocol (MCP) server for accessing the CIRCL CVE SEARCH API. It provides comprehensive vulnerability and security information, making it suitable for security researchers and developers who need to query CVE, CWE, and CAPEC data programmatically.

How to use CIRCL CVE SEARCH MCP Server?

Install the package via npm and add it to your MCP client configuration using the command npx @cyreslab/circl-cve-search-mcp-server. The server exposes four tools: get_cve, browse_vendor, get_cwe, and get_capec, each with specific parameters for querying vulnerability data.

Key features of CIRCL CVE SEARCH MCP Server

  • Access detailed CVE information by ID.
  • Browse CVEs by vendor name.
  • Retrieve Common Weakness Enumeration (CWE) data.
  • Retrieve Common Attack Pattern Enumeration (CAPEC) data.
  • Automatic retry with exponential backoff for reliability.
  • Structured, readable response formatting.

Use cases of CIRCL CVE SEARCH MCP Server

  • Investigate a specific vulnerability by its CVE ID to understand impact and references.
  • Audit a vendor’s product security by browsing all CVEs associated with that vendor.
  • Classify vulnerabilities by weakness type using CWE data for reporting.
  • Study attack patterns via CAPEC data to improve threat modeling.
  • Integrate real-time CVE lookup into security automation pipelines.

Frequently asked questions

1

What data sources does the server use?

The server uses the CIRCL CVE SEARCH API, which provides CVE data from the National Vulnerability Database (NVD), as well as CPE, CWE, and CAPEC data.

2

Does the API require authentication or have rate limits?

The CIRCL CVE SEARCH API is free to use and does not require authentication. Users should use it responsibly to avoid impacting the service.

3

What error conditions does the server handle?

The server handles invalid CVE/CWE/CAPEC ID formats, empty search queries, API rate limiting, network errors, and invalid parameters with clear, actionable error messages.

4

What tools are available and what parameters do they accept?

Available tools are `get_cve` (requires `cve_id`), `browse_vendor` (requires `vendor`, optional `limit` up to 50), `get_cwe` (requires `cwe_id`), and `get_capec` (requires `capec_id`).

Comments

More Developer Tools MCP servers

Cronwatch

cronwatchdev

CronWatch records every run of your scheduled jobs in your own database, and speaks up when one is missed, fails, gets stuck, runs slow or costs too much. CronWatch is free and open-source.

31

OrangePro

Aamir Siddiqui

OrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.

12

SSH MCP Server

hypnosis

SSH MCP server for AI agents: remote commands, file transfer, log search and server audits through OpenSSH.

1

MCP Server By TestMu AI

TestMu AI

TestMu AI MCP Server lets developers run, debug, and triage tests through natural language directly from their IDE (Cursor, Claude, GitHub Copilot, and other MCP clients). It exposes five tools — HyperExecute (test orche

FARPY

mangomunchr

Verified distributed compute for humans, applications, and agents. Submit Blender, Octane, and video workloads, route them across qualified GPUs, track asynchronous execution, download finished artifacts, and verify FARP

1
Advertise