NVD Database MCP Server

@marcoeg

代码仓库

基本信息

分类

数据库

许可证

MIT license

传输方式

stdio

作者

marcoeg

关于 NVD Database MCP Server

An MCP server to query the NIST National Vulnerability Database (NVD)

NVD Database MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "mcp-nvd": {
      "command": "/path/to/uvx",
      "args": [
        "mcp-nvd"
      ],
      "env": {
        "NVD_API_KEY": "your-api-key"
      }
    }
  }
}

NVD Database MCP Server 工具

Retrieves a CVE record by its ID.

Detailed CVE info including scores, weaknesses, and references.

Searches the NVD database by keyword.

List of matching CVEs with total count.

概览

What is NVD Database MCP Server?

A Model Context Protocol server implementation that queries the NIST National Vulnerability Database (NVD) via its API, providing vulnerability data to MCP-compliant clients like Claude Desktop.

How to use NVD Database MCP Server?

Configure the server in the Claude Desktop config file by providing the path to uvx, the mcp-nvd argument, and your NVD API key as an environment variable. Then use the get_cve tool to retrieve a CVE by ID and the search_cve tool to search by keyword with optional parameters.

Key features of NVD Database MCP Server

Query specific CVEs by ID with detailed vulnerability data
Search the NVD database by keyword with customizable results
Supports both stdio and SSE transport modes
Compatible with MCP-compliant clients like Claude Desktop
Offers concise output option for shorter CVE records
Docker support for containerized deployment

Use cases of NVD Database MCP Server

Retrieve full vulnerability details for a known CVE during security assessment
Search for CVEs related to a specific software vendor or product
Automate vulnerability intelligence gathering within an MCP workflow
Integrate real-time CVE lookups into security tooling dashboards

常见问题

What prerequisites are needed to run this server?

Python 3.10 or higher, a free NVD API key (request at nvd.nist.gov), and the `uv` package manager.

How do I configure it for Claude Desktop?

Edit the Claude Desktop config file (`claude_desktop_config.json`) to add `mcp-nvd` under `mcpServers` with the command set to your `uvx` path, args `["mcp-nvd"]`, and the `NVD_API_KEY` environment variable.

Does it support Server-Sent Events (SSE) transport?

Yes, it supports SSE transport for real-time communication, and can be run with `--transport sse --port 9090`.

What tools does the server provide?

Two tools: `get_cve` (retrieve a CVE by ID) and `search_cve` (search by keyword with options for exact match, concise output, and result count up to 2000).

Where does the vulnerability data come from?

All data is fetched directly from the NIST National Vulnerability Database (NVD) via its public API.

数据库分类下的更多 MCP 服务器

Database Gateway

centralmind

Universal MCP-Server for your Databases optimized for LLMs and AI-Agents.

531

MCP DB Wizard

srmadscience

Oracle MCP server with no run-sql tool: It generates tools for each of the PL/SQL procedures, tables and approved SQL you choose. The server doesn't expose a SQL prompt, and can't reveal how it's connected to Oracle.

PostgreSQL

modelcontextprotocol

Model Context Protocol Servers

88.1K

Redis