
nist-nvd-mcp-server
If you work on anything that ships dependencies, this is the server to reach for when you want Claude to answer vulnerability questions against live NIST data instead of stale training knowledge. It wraps the National Vulnerability Database with five tools: keyword and filtered CVE search (severity, CWE, CISA KEV status, date windows), batch CVE lookup up to 100 IDs, CPE dictionary search to resolve a product name, a CPE audit that lists CVEs affecting a specific product version, and CVE change history. The usual flow is search CPEs to get the exact product string, then audit that CPE against a version range, then pull full records for anything that looks serious. It runs over STDIO or Streamable HTTP, and a public hosted instance is available if you don't want to run it locally. Setting an NVD API key makes the slower history endpoint far more usable.
- tools
- 5
- transport
- HTTP
- last updated
- Jul 10, 2026
Tools
5 toolsPublic tool metadata for what this MCP can expose to an agent.
nvd_search_cvesSearch CVEs by keyword, severity, CWE, date range, or CISA KEV status.
Search CVEs by keyword, severity, CWE, date range, or CISA KEV status.
No parameter schema in public metadata yet.
nvd_get_cveFetch one or more CVEs by ID — full CVSS scores, CWE, CPE configs, KEV fields, and references.
Fetch one or more CVEs by ID — full CVSS scores, CWE, CPE configs, KEV fields, and references.
No parameter schema in public metadata yet.
nvd_search_cpesSearch the NVD CPE dictionary by product keyword or partial match string.
Search the NVD CPE dictionary by product keyword or partial match string.
No parameter schema in public metadata yet.
nvd_audit_cpeFind all CVEs affecting a specific product version by CPE name or virtual match string.
Find all CVEs affecting a specific product version by CPE name or virtual match string.
No parameter schema in public metadata yet.
nvd_get_cve_historyRetrieve the change history for a CVE — score revisions, status transitions, and reference additions.
Retrieve the change history for a CVE — score revisions, status transitions, and reference additions.
No parameter schema in public metadata yet.
Sponsors
Readme
@cyanheads/nist-nvd-mcp-server
Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.
Details
- Repository
- github.com/cyanheads/nist-nvd-mcp-server
- Website
- nist-nvd.caseyjhand.com/mcp
- Category
- Search & Web Crawling
- Transport
- HTTP
More from cyanheads
- open-meteo-mcp-server
- openfda-mcp-server
- wikipedia-mcp-server
- census-mcp-server
- crossref-mcp-server
- eur-lex-mcp-server
- faostat-mcp-server
- fema-mcp-server
- libofcongress-mcp-server
- openfoodfacts-mcp-server
- orcid-mcp-server
- reference-data-mcp-server
- usaspending-mcp-server
- arxiv-mcp-server
- exchange-rates-mcp-server
- openlibrary-mcp-server
- protein-mcp-server
- Pubmed Mcp Server167
- Clinicaltrialsgov Mcp Server100
- Openalex Mcp Server17
- Faostat Mcp Server3
- National Parks Mcp Server3
- Federal Regulations Mcp Server2
- Calculator Mcp Server3