CVE MCP Server

@xishir

Basic information

About CVE MCP Server

A Model Context Protocol server providing CVE vulnerability information query capabilities. This server enables LLMs to query detailed information for specific CVE IDs, retrieving data from MITRE's CVE database.

CVE MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "cve-mcp-server": {
      "command": "uvx",
      "args": [
        "cve-mcp-server",
        "sse"
      ]
    }
  }
}

CVE MCP Server tools

Query vulnerability information by CVE ID

Overview

What is CVE MCP Server?

CVE MCP Server is a Model Context Protocol server that enables LLMs to query detailed vulnerability information for specific CVE IDs. It retrieves data from MITRE's CVE database.

How to use CVE MCP Server?

Install via pip with pip install cve-mcp-server. Configure as stdio (default) using the command uvx cve-mcp-server, or run as an SSE server with uvx cve-mcp-server sse and connect via URL. The server exposes one tool, query_cve, which requires a cve_id string parameter.

Key features of CVE MCP Server

Queries vulnerability information by CVE ID.
Retrieves data from MITRE’s CVE database.
Exposes a single query_cve tool for LLM integration.
Supports both stdio and SSE transports.
Can be debugged with the MCP inspector.

Use cases of CVE MCP Server

An AI assistant answering security questions about a specific CVE.
Automating vulnerability lookup in CI/CD or incident response workflows.
Enriching LLM‑driven security analysis tools with real CVE data.

Frequently asked questions

What tools does CVE MCP Server provide?

It provides one tool, `query_cve`, which takes a required `cve_id` parameter (e.g., 'CVE-2021-44228').

How do I install CVE MCP Server?

Install it via pip: `pip install cve-mcp-server`.

What transports does CVE MCP Server support?

It supports stdio (default) and SSE. For stdio, run `uvx cve-mcp-server`; for SSE, run `uvx cve-mcp-server sse`.

Where does CVE MCP Server get vulnerability data?

It retrieves data from MITRE’s CVE database.

Does CVE MCP Server require authentication?

The README does not mention any authentication mechanism.

Comments

More Developer Tools MCP servers

SSH MCP Server

hypnosis

SSH MCP server for AI agents: remote commands, file transfer, log search and server audits through OpenSSH.

DrUrls

DrUrls audits websites for SEO, and its MCP server lets Claude, ChatGPT, Claude Code, Cursor or VS Code work with those audits directly: list your sites with their latest score and grade, read each issue across SEO, perf

ReactVision MCP

ReactVision, Inc

Most MCP servers hand your agent documentation. This one hands it a renderer. Write a single React Native codebase that ships native AR to phones and VR to headsets, then let your agent validate every prop, check each pl

LastPing

Know when your AI agents, cron jobs and CI pipelines fail, stall or go quiet. Your agent sets up monitors from a plain description, tells you what is broken and why, reads run history and traces, and writes notes on inci

Termany

thinkany-ai

Agent-Native Terminal

174