NVD CVE MCP Server
About
The NVD CVE MCP Server is a powerful security research tool
Details
- Author
- socteam-ai
- Categories
- Other, Security, Database
Jump to
Setup
Install NVD CVE MCP Server in your MCP client (Claude Desktop, Cursor, Windsurf, and others).
Repository: https://github.com/socteam-ai/nvd-cve-mcp-server
Follow the installation instructions in the repository README, then restart your MCP client.
A Model Context Protocol (MCP) server for retrieving and displaying CVE vulnerability information from the National Vulnerability Database (NVD). Features dual data sources with NVD API and web scraping fallback.
- 🔍CVE Details Lookup: Retrieve complete vulnerability information by CVE ID
- 🔎Keyword Search: Search for CVE vulnerabilities by keywords
- 📊Formatted Output: Display vulnerability information in elegant Markdown format
- 🔄Dual Data Sources: API-first approach with web scraping as fallback
- 🌐Multi-language Support: Full support for both English and Chinese
No installation required! Use directly with npx:
{ "mcpServers": { "nvd-cve": { "command": "npx", "args": ["-y", "nvd-cve-mcp-server"] } } }
Configure in Claude Desktop or other MCP-compatible applications:
macOS/Linux(~/Library/Application Support/Claude/claude_desktop_config.json):
{ "mcpServers": { "nvd-cve": { "command": "npx", "args": ["-y", "nvd-cve-mcp-server"] } } }
Windows(%APPDATA%\Claude\claude_desktop_config.json):
{ "mcpServers": { "nvd-cve": { "command": "npx", "args": ["-y", "nvd-cve-mcp-server"] } } }
Retrieve detailed information for a specific CVE.
- cve_id(required): CVE ID in format CVE-YYYY-NNNNN
# CVE-2025-13583 ## 📊 Basic Information - CVE ID: CVE-2025-13583 - CVSS Score: 9.8 - Severity: CRITICAL - Published: 2025-11-23 - Last Modified: 2025-11-26 - CWE Type: CWE-89 ## 📝 Description [Detailed vulnerability description] ## 🔗 References 1. VulDB 2. GitHub Issue ## 🌐 Official Links - NVD Details - CVE Record
Search for CVE vulnerabilities by keyword.
- keyword(required): Search keyword
- limit(optional): Number of results to return (default: 10, max: 20)
Search for CVEs related to "SQL injection" Search for "WordPress" vulnerabilities, limit to 5 results
# CVE Search Results: "SQL injection" Found 10 related vulnerabilities | CVE ID | Severity | CVSS | Published | Description | |--------|----------|------|-----------|-------------| | CVE-2025-13583 | CRITICAL | 9.8 | 2025-11-23 | A vulnerability has been found in code-projects... | | CVE-2025-13582 | HIGH | 7.3 | 2025-11-23 | A vulnerability was found in code-projects... |
Please help me query CVE-2025-13583 details
Search for recent SQL injection vulnerabilities
Find WordPress-related CVE vulnerabilities
- Official REST API:https://services.nvd.nist.gov/rest/json/cves/2.0
- Provides structured JSON data
- Includes complete CVSS scores, CWE classifications, etc.
- Web scraping when API is unavailable
- Uses Cheerio for HTML parsing
- Extracts key vulnerability information
- @modelcontextprotocol/sdk: MCP protocol implementation
- axios: HTTP client
- cheerio: HTML parser
{ id: "CVE-2025-13583", description: "Vulnerability description...", cvssScore: 9.8, severity: "CRITICAL", published: "2025-11-23T10:15:03.000", lastModified: "2025-11-26T12:39:31.000", references: [ { url: "https://example.com", source: "VulDB" } ], cweId: "CWE-89", source: "api" // or "web" }
- API Rate Limits: NVD API has rate limits, please use responsibly
- Network Requirements: Requires access to nvd.nist.gov
- Data Freshness: CVE information is updated regularly, check for latest data
- Format Validation: CVE ID must follow CVE-YYYY-NNNNN format
- Check network connection
- System will automatically switch to web scraping mode
- Verify CVE ID format is correct
- Check if CVE has been published to NVD
- Try using more general keywords
- Check spelling
nvd-cve-mcp-server/ ├── src/ │ └── index.js # Main server code ├── package.json # Project configuration └── README.md # Documentation
# Development mode (auto-restart) npm run dev # Production mode npm start
- NPM Package
- GitHub Repository
- NVD Official Website
- NVD API Documentation
- MCP Protocol
- CVE Official Website
Note: This tool is for security research and educational purposes only. Please comply with relevant laws, regulations, and ethical standards.
CVE database and vulnerability intelligence for AI agents. Search NIST NVD, check software security, find known vulnerabilities — no API key required.
Real-time CVE lookup via NIST NVD 2.0, CISA KEV alerts, EPSS exploitation probability, and MITRE ATT&CK mappings. 7 tools for AI-powered vulnerability assessment.
Exploit Intelligence Platform MCP Server
An MCP (Model Context Protocol) server that gives AI assistants access to the Exploit Intelligence Platform — hundreds of thousands of vulnerabilities and exploits from NVD, CISA KEV, VulnCheck KEV, InTheWild.io, ENISA EUVD, OSV.dev, EPSS, ExploitDB, Metasploit, GitHub, and more. I
Access real-time cyber and threat intelligence, including details on vulnerabilities, threat actors, and malware.
MCP-native OSINT framework for AI agents. Exposes 9 intelligence tools (email enumeration, username search, breach check, WHOIS, IP intel, subdomain enum, dorks, paste search, phone intel) via Model Context Protocol. Also works as a standalone Python CLI.
TI Mindmap HUB MCP Server provides AI assistants with direct access to curated threat intelligence — reports, CVEs, IOCs, STIX bundles, and weekly briefings — through the Model Context Protocol.
Analyze the entire cybersecurity market, products and companies with a single prompt
An Elasticsearch server focused on security and threat analysis. Requires a valid Elasticsearch license (trial, platinum, or enterprise) for connection.
Interface with Malware Bazaar to get real-time threat intelligence and sample metadata for cybersecurity research.
Integrates with the OpenCTI platform to query and retrieve threat intelligence data.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
