Cve Search_mcp

What is Cve Search_mcp?

Cve Search_mcp is a Model Context Protocol (MCP) server that queries the CVE-Search API. It provides comprehensive access to CVE-Search, allowing users to browse vendors and products, retrieve CVEs by ID, and fetch the most recently updated CVEs. It is intended for security researchers, developers, or any MCP client user needing automated CVE lookups.

How to use Cve Search_mcp?

Clone the repository and install dependencies with uv sync. Then add the server to your MCP client (e.g., Cline or Roo Code) by configuring a command that runs uv --directory <path> run main.py. The server exposes several tools for querying CVE data.

Key features of Cve Search_mcp

• Retrieve a JSON list of all vendors.
• Get all products associated with a vendor.
• Get all vulnerabilities per vendor and product.
• Look up a specific CVE by its ID.
• Fetch the last 30 CVEs with CAPEC, CWE, and CPE expansions.
• Obtain database status and last update information.

Use cases of Cve Search_mcp

• Automate CVE lookups in security incident response workflows.
• Correlate vulnerabilities with specific vendor products during audits.
• Integrate CVE data into MCP‑based threat intelligence dashboards.
• Monitor recent vulnerabilities and their enrichment data.

FAQ from Cve Search_mcp

What are the runtime requirements?

Python 3.10 or later and the uv package manager are required.

Where does the data come from?

All data is sourced from the public CVE‑Search API (https://www.cve‑search.org/api/).

How do I invoke Cve Search_mcp?

The server is run via an MCP client. Example configuration uses uv --directory <YOUR_DIR> run main.py.

What transports or authentication are used?

The README does not specify any additional transports or authentication. The server is invoked locally via the command line.