CISA Vulnerability Checker MCP Server
About
CISA Vulnerability Checker MCP Server is a Model Context Protocol (MCP) server that provides real‑time access to CISA’s Known Exploited Vulnerabilities (KEV) catalog. It enables security analysts and developers to check individual CVEs, retrieve recent entries, and integrate…
Details
- Author
- yeger00
- GitHub stars
- 1
- Downloads
- 179
- Categories
- Developer Tools
Jump to
- Real‑time CVE checking and monitoring
- Integration with Claude for enhanced security analysis
- Access to the complete CISA KEV catalog
- REST API endpoints for health, status, and CVE lookups
- CLI commands for recent and specific vulnerability checks
- Available as a hosted endpoint or self‑hosted installation
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
CISA Vulnerability Checker MCP ServerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Add the server to your Claude desktop configuration (~/Library/Application Support/Claude/claude_desktop_config.json) using the remote endpoint https://amcipi.com/cisa-kev/mcp. Alternatively, clone the repository and run locally with uvicorn or Docker. Use the CLI commands cisa-vuln-checker check-cve <CVE_ID> and cisa-vuln-checker recent-cves --days 7 for quick checks.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"cisa vulnerability checker mcp server": {
"kev-mcp": {
"command": "python",
"args": [
"-m",
"venv",
"venv"
]
}
}
}
}McpServers
{
"kev-mcp": {
"command": "python",
"args": [
"-m",
"venv",
"venv"
]
}
}CISA Vulnerability Checker MCP Server
A Model Control Protocol (MCP) server that provides access to CISA's Known Exploited Vulnerabilities (KEV) catalog through Claude and Cursor integration.
MCP Server Functionality
The MCP server provides real-time access to CISA's KEV catalog through Claude and Cursor integration. It enables:
- Real-time CVE checking and monitoring
- Integration with Claude for enhanced security analysis
- Access to the complete CISA KEV catalog
Production Deployment
The MCP server is available at: https://amcipi.com/cisa-kev/
To configure Claude to use the CISA vulnerability checker server, add the following to your Claude configuration file (usually located at ~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"cisa": {
"command": "npx",
"args": [
"mcp-remote",
"https://amcipi.com/cisa-kev/mcp"
]
}
}
}
Installation Options
Option 1: Install from Repository
1. Clone this repository:
git clone <repository-url>
cd <repository-name>
2. Create a virtual environment (recommended):
python -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate
3. Install the package in development mode:
pip install -e .
Option 2: Run Directly from Repository
To run the MCP server directly:
uvicorn cisa_vuln_checker.server:app
This will start the server on the default port (8000).
Option 3: Run with Docker
Build the image:
docker build -t cisa-vuln-checker .
Run the container:
docker run -p 8080:8080 cisa-vuln-checker
API Functionality
REST API Endpoints
- Health Check: GET /rest/health
- Server Status: GET /rest/status
- Check CVE: GET /rest/check-cve?cve_id=CVE-2024-1234
- Recent CVEs: GET /rest/recent-cves?days=7
- API Documentation: GET /rest/docs
CLI Commands
Get CVEs from the last 7 days:
cisa-vuln-checker recent-cves --days 7
Get CVEs from the last 24 hours:
cisa-vuln-checker recent-cves --hours 24
Check if a CVE exists:
cisa-vuln-checker check-cve CVE-2023-1234
Development
Running Tests
The project includes integration tests that test the CLI commands. To run the tests:
1. Make sure you have the package installed in development mode
2. Run the tests:
pytest tests/
The tests will:
- Test getting recent CVEs by days and hours
- Test error handling when no arguments are provided
- Test checking for existing and non-existing CVEs
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
