Advertise
MCP.so
Sign In

NVD Database MCP Server

@marcoeg

Repository

Basic information

Category

Databases

License

MIT license

Transports

stdio

Author

marcoeg

About NVD Database MCP Server

An MCP server to query the NIST National Vulnerability Database (NVD)

NVD Database MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-nvd": {
      "command": "/path/to/uvx",
      "args": [
        "mcp-nvd"
      ],
      "env": {
        "NVD_API_KEY": "your-api-key"
      }
    }
  }
}

NVD Database MCP Server tools

4

Retrieves a CVE record by its ID.

Detailed CVE info including scores, weaknesses, and references.

Searches the NVD database by keyword.

List of matching CVEs with total count.

Overview

What is NVD Database MCP Server?

A Model Context Protocol server implementation that queries the NIST National Vulnerability Database (NVD) via its API, providing vulnerability data to MCP-compliant clients like Claude Desktop.

How to use NVD Database MCP Server?

Configure the server in the Claude Desktop config file by providing the path to uvx, the mcp-nvd argument, and your NVD API key as an environment variable. Then use the get_cve tool to retrieve a CVE by ID and the search_cve tool to search by keyword with optional parameters.

Key features of NVD Database MCP Server

  • Query specific CVEs by ID with detailed vulnerability data
  • Search the NVD database by keyword with customizable results
  • Supports both stdio and SSE transport modes
  • Compatible with MCP-compliant clients like Claude Desktop
  • Offers concise output option for shorter CVE records
  • Docker support for containerized deployment

Use cases of NVD Database MCP Server

  • Retrieve full vulnerability details for a known CVE during security assessment
  • Search for CVEs related to a specific software vendor or product
  • Automate vulnerability intelligence gathering within an MCP workflow
  • Integrate real-time CVE lookups into security tooling dashboards

Frequently asked questions

1

What prerequisites are needed to run this server?

Python 3.10 or higher, a free NVD API key (request at nvd.nist.gov), and the `uv` package manager.

2

How do I configure it for Claude Desktop?

Edit the Claude Desktop config file (`claude_desktop_config.json`) to add `mcp-nvd` under `mcpServers` with the command set to your `uvx` path, args `["mcp-nvd"]`, and the `NVD_API_KEY` environment variable.

3

Does it support Server-Sent Events (SSE) transport?

Yes, it supports SSE transport for real-time communication, and can be run with `--transport sse --port 9090`.

4

What tools does the server provide?

Two tools: `get_cve` (retrieve a CVE by ID) and `search_cve` (search by keyword with options for exact match, concise output, and result count up to 2000).

5

Where does the vulnerability data come from?

All data is fetched directly from the NIST National Vulnerability Database (NVD) via its public API.

Comments

More Databases MCP servers

Xata MCP Server

The Xata MCP server lets AI assistants and agents interact with your Xata organizations, projects, and Postgres database branches.

Fund Momentum MCP Server

schneidavie

Fund Momentum MCP Server — VC intelligence for AI assistants. 1000+ active VC funds, live investor signals, AI-powered startup matching.

Dbhub

bytebase

Zero-dependency, token-efficient database MCP server for Postgres, MySQL, SQL Server, MariaDB, SQLite.

3.1K

Local YDB MCP

astandrik

Safety-first stdio MCP server with 38 tools for operating Docker-based local-ydb environments locally or over SSH.

4

Expired Domains MCP | Karma.Domains

karma-domains

Connect Karma.Domains to ChatGPT, Claude, Cursor, VS Code, or another MCP client — and find a domain in plain language. The same auctions, expired, backorder, and buy-now data you use in the app, plus saved filters, note

Advertise