NVD MCP Server

What is NVD MCP Server?

The NVD MCP Server bridges conversational queries with the National Vulnerability Database (NVD), letting developers ask questions in plain English and get real-time vulnerability data directly inside AI-powered IDEs like Windsurf.

How to use NVD MCP Server?

Install dependencies (pip install mcp httpx python-dotenv), clone the repo, configure an NVD API key in keys.env, launch the server with python nvd_mcp.py --transport stdio, then connect an MCP client (e.g., Claude Desktop via claude_desktop_config.json). Query using natural language like "What's the scoop on CVE-2023-1234?".

Key features of NVD MCP Server

• CVE details lookup with description, CVSS score, and severity.
• Keyword search for vulnerabilities tied to technologies.
• Retrieve recent CVEs from a specified time period (e.g., past week).
• Severity filtering (e.g., list only critical vulnerabilities).

Use cases of NVD MCP Server

• Look up details for a specific CVE by asking a natural‑language question.
• Search for all vulnerabilities mentioning a particular technology or keyword.
• Stay updated on newly reported CVEs from the last week.
• Filter and prioritize the most urgent security risks by severity.