cyanheads avatar

nist-nvd-mcp-server

cyanheads/nist-nvd-mcp-server

If you work on anything that ships dependencies, this is the server to reach for when you want Claude to answer vulnerability questions against live NIST data instead of stale training knowledge. It wraps the National Vulnerability Database with five tools: keyword and filtered CVE search (severity, CWE, CISA KEV status, date windows), batch CVE lookup up to 100 IDs, CPE dictionary search to resolve a product name, a CPE audit that lists CVEs affecting a specific product version, and CVE change history. The usual flow is search CPEs to get the exact product string, then audit that CPE against a version range, then pull full records for anything that looks serious. It runs over STDIO or Streamable HTTP, and a public hosted instance is available if you don't want to run it locally. Setting an NVD API key makes the slower history endpoint far more usable.

tools
5
transport
HTTP
last updated
Jul 10, 2026

Tools

5 tools

Public tool metadata for what this MCP can expose to an agent.

nvd_search_cvesSearch CVEs by keyword, severity, CWE, date range, or CISA KEV status.

Search CVEs by keyword, severity, CWE, date range, or CISA KEV status.

No parameter schema in public metadata yet.

nvd_get_cveFetch one or more CVEs by ID — full CVSS scores, CWE, CPE configs, KEV fields, and references.

Fetch one or more CVEs by ID — full CVSS scores, CWE, CPE configs, KEV fields, and references.

No parameter schema in public metadata yet.

nvd_search_cpesSearch the NVD CPE dictionary by product keyword or partial match string.

Search the NVD CPE dictionary by product keyword or partial match string.

No parameter schema in public metadata yet.

nvd_audit_cpeFind all CVEs affecting a specific product version by CPE name or virtual match string.

Find all CVEs affecting a specific product version by CPE name or virtual match string.

No parameter schema in public metadata yet.

nvd_get_cve_historyRetrieve the change history for a CVE — score revisions, status transitions, and reference additions.

Retrieve the change history for a CVE — score revisions, status transitions, and reference additions.

No parameter schema in public metadata yet.

Sponsors

Readme

@cyanheads/nist-nvd-mcp-server

Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.

5 Tools • 2 Resources

Details

Repository
github.com/cyanheads/nist-nvd-mcp-server
Website
nist-nvd.caseyjhand.com/mcp
Category
Search & Web Crawling
Transport
HTTP

More from cyanheads

Related Search & Web Crawling MCP servers

View all
1cyanheads avataropenfoodfacts-mcp-servercyanheads/openfoodfacts-mcp-serverBarcode lookup, nutrition search, and product comparison for 3M+ crowd-sourced food products.0stars
2danielguru avatarRepomemorydanielguru/repomemoryPersistent memory for AI coding agents. Hybrid search, auto-session capture, context routing.0stars
3datmay-dot avatarStreambridgedatmay-dot/streambridgeSearch Chinese TV drama scenes with second-level timestamps by character, emotion, or scene type.0stars
4bluraysuchmaschine avatarSuchede.bluraysuchmaschine/sucheSearch Blu-ray and 4K UHD movies, featured titles, and detailed movie information.0stars
5mcp avatarDm Drogerie Marktde.dm.mcp/dm-drogerie-marktReal-time product data, semantic search and more from dm-drogerie markt, Europe's leading drugstore.0stars
6deficlow avatarHyperStoredeficlow/hyperstore-mcpSearch and inspect 6,500+ curated AI apps from the HyperStore directory.0stars