Vulners Mcp

vulnerscom/vulners-mcp

Connects Claude to the Vulners vulnerability database, giving you natural language access to over 4 million security bulletins. You get seven tools covering full-text Lucene search across CVEs and vendor advisories, direct bulletin lookups by ID, CPE search and autocomplete, and software auditing for both generic CPE strings and specific Linux packages. The server auto-detects stdio for Claude Desktop or runs as an HTTP endpoint for other clients. Useful when you're doing security research or package auditing and want to query "recent Chrome vulnerabilities" or "audit this Ubuntu package list" without leaving your conversation. Requires a Vulners API key and supports Docker or local Python deployment.

GitHub stars: 7
tools: 7
auth: Secret needed
transport: STDIO, HTTP
env var: 1
last updated: Oct 22, 2026

View on GitHub

Install

From registry metadata

$ npx add-mcp https://mcp.vulners.com/mcp --name vulners-mcp

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http vulners-mcp https://mcp.vulners.com/mcp

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 7 tools

Verified live against the running server on Nov 6, 2026.

bulletin_by_id🚨 PRIMARY TOOL FOR KNOWN IDs 🚨 Fetch a bulletin by CVE or Vulners ID. Returns a COMPACT triage-card summary by default -- id, title, CVSS3, EPSS, CVE list, and a compact exploitation/AI signal -- NOT the full record. Pass fields=[...] to widen (e.g. add 'description', 'cvss'...3 params

🚨 PRIMARY TOOL FOR KNOWN IDs 🚨 Fetch a bulletin by CVE or Vulners ID. Returns a COMPACT triage-card summary by default -- id, title, CVSS3, EPSS, CVE list, and a compact exploitation/AI signal -- NOT the full record. Pass fields=[...] to widen (e.g. add 'description', 'cvss'...

Parameters* required

fieldsvalue

Override the default COMPACT field projection to widen the response. Pass ['*'] to request every field Vulners has for the bulletin (can be very large for popular CVEs). Useful individual fields to...

id*value

Single CVE ID, Vulners ID, or bulletin ID to fetch, or a list of IDs. Supports CVE identifiers (CVE-2024-21762), vendor-specific IDs (RHSA-2024:1234), or Vulners internal IDs. When a list is provid...

referencesboolean

Include the full reference graph (linked advisories, patches, related bulletins) for a SINGLE-ID lookup. Defaults to False: the compact default projection already covers the essentials (CVSS3, EPSS...default: false

search_lucene🔍 DISCOVERY TOOL FOR UNKNOWN VULNERABILITIES 🔍 Full-text search in Vulners Knowledge Base using Lucene syntax. Use ONLY when you don't have specific IDs or version information. NEVER use for known CVE/bulletin IDs - use bulletin_by_id instead. NEVER use for specific software...4 params

🔍 DISCOVERY TOOL FOR UNKNOWN VULNERABILITIES 🔍 Full-text search in Vulners Knowledge Base using Lucene syntax. Use ONLY when you don't have specific IDs or version information. NEVER use for known CVE/bulletin IDs - use bulletin_by_id instead. NEVER use for specific software...

Parameters* required

fieldsvalue

Override the default curated per-hit field projection. Pass ['*'] for every field per hit (large responses). If omitted, a curated default is used: id, title, type, cvss, cvss3, epss, published, hr...

query*string

Lucene query string for searching vulnerabilities. Supports Boolean operators (AND, OR, NOT), field-specific queries, range searches, and wildcard matching. NEVER use for specific software versions...

sizeinteger

Maximum number of results to return. Default is 20, hard-capped at 100 regardless of caller.default: 20

skipinteger

Number of results to skip for pagination. Default is 0.default: 0

audit_software🔍 VERSION-SPECIFIC SOFTWARE AUDIT 🔍 Audit specific software versions for known vulnerabilities. Use this when you have exact software version information (e.g., Chrome 138.0.7204.184). NEVER use search_lucene for version-specific software audits.1 params

🔍 VERSION-SPECIFIC SOFTWARE AUDIT 🔍 Audit specific software versions for known vulnerabilities. Use this when you have exact software version information (e.g., Chrome 138.0.7204.184). NEVER use search_lucene for version-specific software audits.

Parameters* required

body*object

Request body containing software list and audit parameters. Should include 'software' array with structured CPE objects (NOT CPE strings) and optional 'match' parameter ('partial' or 'full'). Each...

get_supported_osList supported OS identifiers/versions for Linux package audit. Get available operating systems for vulnerability analysis.

List supported OS identifiers/versions for Linux package audit. Get available operating systems for vulnerability analysis.

No parameters. Call it with no arguments.

audit_linux_packagesLinux package audit (RPM/DEB) for a given distro + version. Analyze Linux package vulnerabilities against the Vulners database.4 params

Linux package audit (RPM/DEB) for a given distro + version. Analyze Linux package vulnerabilities against the Vulners database.

Parameters* required

include_candidatesvalue

Whether to include potential matches in results. If None, uses default behavior (typically false).

os*string

Linux distribution identifier (e.g., ubuntu, debian, centos, rhel, fedora). Use get_supported_os() to see available options.

package*array

Installed packages, each formatted EXACTLY as the target OS's own package manager lists them -- i.e. one line of the output produced by the command get_supported_os() returns for this OS. DEB-based...

version*string

Distribution version/release (e.g., 22.04, 12, 8, 40). Must match a supported version for the specified OS.

query_autocompleteAutocomplete helper for search inputs (vendors, products, CVEs, etc.). Get search suggestions from the Vulners database.1 params

Autocomplete helper for search inputs (vendors, products, CVEs, etc.). Get search suggestions from the Vulners database.

Parameters* required

body*object

Request body containing autocomplete parameters. Should include 'query' field with partial search term (e.g., 'openssl', 'CVE-2024-', 'microsoft windows').

search_cpeFind CPE strings by vendor+product (latest schema). Search for Common Platform Enumeration identifiers in the Vulners database.3 params

Find CPE strings by vendor+product (latest schema). Search for Common Platform Enumeration identifiers in the Vulners database.

Parameters* required

product*string

Product name to search for (e.g., 'windows_10', 'chrome', 'http_server', 'java'). Case-insensitive.

sizevalue

Maximum number of CPE results to return. If None, uses server default.

vendor*string

Vendor name to search for (e.g., 'microsoft', 'google', 'apache', 'oracle'). Case-insensitive.

Configuration

VULNERS_API_KEY*secret

Your Vulners API key (https://vulners.com/userinfo)

Readme

Vulners MCP Server

Vulners MCP is a Model Context Protocol (MCP) server that provides seamless access to the Vulners vulnerability database through AI assistants like Claude Desktop. It enables security researchers and developers to query comprehensive vulnerability data, search for CVEs, analyze security bulletins, and audit software packages directly through natural language conversations.

Features

AI Assistant Integration: Works natively with Claude Desktop and other MCP-compatible clients
Dual Transport Support: Automatically detects and supports both stdio (for Claude Desktop) and HTTP transports
Comprehensive Tools: 7 MCP tools for vulnerability research including:
- Full-text Lucene search across 4M+ vulnerability bulletins
- CVE and bulletin information retrieval
- Software/package vulnerability auditing
- CPE search and autocomplete
- Linux package vulnerability auditing
Flexible Deployment: prebuilt Docker image (ghcr.io/vulnerscom/vulners-mcp), PyPI package, or local build
Environment-based Configuration: Simple setup via environment variables

View the full README on GitHub

Details

Repository: github.com/vulnerscom/vulners-mcp
Package: vulners-mcp
Transport: STDIO, HTTP
Auth: Required
Registry: MCP registry, active
Resources: 3
Tools verified: Nov 6, 2026