MCP server intelligence profile

cve-mcp Server

Unifies NVD, EPSS, CISA KEV, GitHub Advisory, and OSV into a single MCP server, enabling AI agents to query vulnerability intelligence conversationally with 23 tools for incident response, prioritization, dependency audits, and threat monitoring

Local Onlybadchars
Awaiting current scanNpm · 0.2.0

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

1Distribution channel
41Independently observed tools
0Linked remote endpoints
AvailableVersion intelligence

Detailed security scan evidence is not public for this MCP yet. Public identity, registry metadata, and independently observed protocol inventory remain available.

Install and connect

Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.

Install cve-mcp from npm

Version 0.2.0 declares 1 executable entrypoint.

npm install --save-exact cve-mcp@0.2.0
npx -y -p cve-mcp@0.2.0 cve-mcp
MCP client configuration example
{
  "mcpServers": {
    "cve-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "-p",
        "cve-mcp@0.2.0",
        "cve-mcp"
      ]
    }
  }
}

Identity

Canonical slugcve-mcp-f6e6a198DeploymentLocal Only
Canonical packagenpm:cve-mcpRepositorybadchars/cve-mcp
First published—Latest release—
Last security verification—Classification confidence90%
PublicationDraftOfficial distributionNot verified

Distributions

ChannelIdentifierCurrent versionVersionsSource
npmcve-mcp0.2.02Repository

Current release

PackageVersionPublished / observedInventorySecurity scan
npmcve-mcp0.2.0CurrentSep 5, 202641 toolsSucceeded · 0 resources · 0 promptsEvidence restricted
Enterprise protection

Continuously monitor this MCP for security risk

Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.

  • Independent exact-version security scans
  • Continuous release and vulnerability monitoring
  • Risk-change alerts with capability context
  • Historical evidence and API exports
Custom pricingContact salesTailored to your organization, integrations, data needs, and support requirements.

Current version evidence

No public current-version evidence is available yet.

Current protocol inventory

2025-06-18Negotiated protocol
cve-mcpServer-reported name
1Capability groups
Aug 15, 2026Observed

Tools 41

ToolCategoryAnnotationsRisk
attackerkb_assessGet community assessments for a CVE from AttackerKB. Shows attacker value, exploitability ratings, and Rapid7 analysis from security researchers.
Input schema
{
  "type": "object",
  "properties": {
    "cveId": {
      "type": "string",
      "description": "CVE ID (e.g., 'CVE-2024-3400')"
    }
  },
  "required": [
    "cveId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
circl_cveGet CVE details from CIRCL (Computer Incident Response Center Luxembourg). Returns CAPEC attack patterns, vulnerable products, and access/impact vectors. No API key required.
Input schema
{
  "type": "object",
  "properties": {
    "cveId": {
      "type": "string",
      "description": "CVE ID (e.g., 'CVE-2024-3400')"
    }
  },
  "required": [
    "cveId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cpe_matchGet CPE match criteria for a specific CVE from NVD. Shows exactly which product versions are affected, including version ranges.
Input schema
{
  "type": "object",
  "properties": {
    "cveId": {
      "type": "string",
      "description": "CVE ID (e.g., 'CVE-2024-3400')"
    },
    "limit": {
      "type": "number",
      "description": "Max results (default 50)"
    }
  },
  "required": [
    "cveId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cpe_searchSearch the NVD CPE (Common Platform Enumeration) dictionary by keyword. Find standardized product identifiers for use in vulnerability queries.
Input schema
{
  "type": "object",
  "properties": {
    "keyword": {
      "type": "string",
      "description": "Product/vendor keyword (e.g., 'Apache HTTP Server', 'Microsoft Windows')"
    },
    "limit": {
      "type": "number",
      "description": "Max results (default 20, max 100)"
    }
  },
  "required": [
    "keyword"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cve_by_productSearch CVEs by vendor or product name. Uses NVD keyword exact match to find all vulnerabilities for a specific technology (e.g., 'Apache Log4j', 'Microsoft Exchange').
Input schema
{
  "type": "object",
  "properties": {
    "keyword": {
      "type": "string",
      "description": "Product or vendor name (e.g., 'Apache Log4j', 'OpenSSL')"
    },
    "limit": {
      "type": "number",
      "description": "Max results (default 20, max 100)"
    }
  },
  "required": [
    "keyword"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cve_compareCompare two CVEs side by side. Shows CVSS, EPSS, KEV status, affected products, and risk scores with a comparison summary highlighting which is more dangerous.
Input schema
{
  "type": "object",
  "properties": {
    "cve1": {
      "type": "string",
      "description": "First CVE ID (e.g., 'CVE-2024-3400')"
    },
    "cve2": {
      "type": "string",
      "description": "Second CVE ID (e.g., 'CVE-2021-44228')"
    }
  },
  "required": [
    "cve1",
    "cve2"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cve_enrichFull CVE enrichment — queries NVD, EPSS, KEV, GitHub Advisory, OSV, Shodan CVEDB, VulnCheck, Nuclei Templates, and Metasploit in parallel for comprehensive vulnerability intelligence. Returns CVSS, exploitation probability, KEV status, affected packages, exploit availability, and a computed risk score.
Input schema
{
  "type": "object",
  "properties": {
    "cveId": {
      "type": "string",
      "description": "CVE ID to enrich (e.g., 'CVE-2024-3400')"
    }
  },
  "required": [
    "cveId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cve_list_sourcesList all vulnerability data sources and their current availability. Shows which APIs are reachable and whether optional API keys are configured. Covers 11 sources: NVD, EPSS, KEV, GHSA, OSV, Shodan, VulnCheck, Vulners, CIRCL, AttackerKB, MITRE CWE.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {}
}
——
cve_prioritizeRank a list of CVEs by exploitation risk. Combines CVSS score, EPSS probability, KEV status, and weaponization signals (Nuclei/Metasploit modules) into a unified risk score. Higher score = patch first.
Input schema
{
  "type": "object",
  "properties": {
    "cves": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "List of CVE IDs to prioritize (e.g., ['CVE-2024-3400', 'CVE-2021-44228'])"
    }
  },
  "required": [
    "cves"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cve_reportGenerate a markdown vulnerability report for a list of CVEs. Includes NVD details, EPSS scores, KEV status, and remediation priority.
Input schema
{
  "type": "object",
  "properties": {
    "cves": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "List of CVE IDs to include in the report"
    },
    "title": {
      "type": "string",
      "description": "Report title (default: 'Vulnerability Report')"
    }
  },
  "required": [
    "cves"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cve_to_attackMap CWE weakness IDs to MITRE ATT&CK techniques. Shows which attack techniques a vulnerability enables, useful for threat modeling and detection engineering.
Input schema
{
  "type": "object",
  "properties": {
    "cweIds": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "CWE IDs to map (e.g., ['CWE-79', 'CWE-89'])"
    }
  },
  "required": [
    "cweIds"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cve_trendingGet currently trending/hot CVEs — vulnerabilities with the highest exploitation probability right now. Combines EPSS scores with NVD details and KEV status.
Input schema
{
  "type": "object",
  "properties": {
    "limit": {
      "type": "number",
      "description": "Number of trending CVEs to return (default 15)"
    },
    "minEpss": {
      "type": "number",
      "description": "Minimum EPSS score filter (0-1, default 0.3 = 30%)"
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cvss_parseParse a CVSS v3.x or v4.0 vector string into a human-readable breakdown. Explains each metric, calculates the base score, and provides a plain-English summary. Supports both CVSS:3.1 and CVSS:4.0 format.
Input schema
{
  "type": "object",
  "properties": {
    "vector": {
      "type": "string",
      "description": "CVSS vector string (e.g., 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H')"
    }
  },
  "required": [
    "vector"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cwe_getGet full CWE details from the MITRE CWE REST API. Returns name, description, related weaknesses, applicable platforms, consequences, detection methods, and mitigations for any of the 1000+ CWEs.
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "CWE ID (e.g., 'CWE-79' or just '79')"
    }
  },
  "required": [
    "id"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cwe_hierarchyGet CWE parent/child hierarchy. Shows which weaknesses are more general (parents) and more specific (children) variants of a given CWE.
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "CWE ID (e.g., 'CWE-79' or just '79')"
    }
  },
  "required": [
    "id"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cwe_lookupLook up a CWE (Common Weakness Enumeration) by ID or search by keyword. Returns name, description, and category for the top 40+ most common CWEs.
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "CWE ID (e.g., 'CWE-79' or just '79')"
    },
    "query": {
      "type": "string",
      "description": "Search keyword (e.g., 'injection', 'buffer overflow')"
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cwe_top25Get the MITRE CWE Top 25 Most Dangerous Software Weaknesses for a given year. Shows the most impactful vulnerability classes ranked by frequency and severity.
Input schema
{
  "type": "object",
  "properties": {
    "year": {
      "type": "number",
      "description": "Year (default: current year, e.g., 2024)"
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
epss_scoreGet EPSS (Exploit Prediction Scoring System) score for one or more CVEs. Returns the probability of exploitation within 30 days and percentile ranking.
Input schema
{
  "type": "object",
  "properties": {
    "cve": {
      "type": "string",
      "description": "CVE ID(s), comma-separated for multiple (e.g., 'CVE-2024-3400,CVE-2021-44228')"
    }
  },
  "required": [
    "cve"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
epss_topGet the top CVEs ranked by EPSS exploitation probability. Shows the most likely-to-be-exploited vulnerabilities.
Input schema
{
  "type": "object",
  "properties": {
    "limit": {
      "type": "number",
      "description": "Number of results (default 20)"
    },
    "minScore": {
      "type": "number",
      "description": "Minimum EPSS score filter (0-1, e.g., 0.5 for 50%+)"
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
exploit_searchSearch for public PoC exploits and exploit code for a CVE on GitHub. Returns repositories with proof-of-concept code, sorted by stars.
Input schema
{
  "type": "object",
  "properties": {
    "cve": {
      "type": "string",
      "description": "CVE ID to search exploits for (e.g., 'CVE-2024-3400')"
    }
  },
  "required": [
    "cve"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
ghsa_getGet full details of a GitHub security advisory by GHSA ID or CVE ID. Includes affected packages, CVSS, and patch information.
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "GHSA ID (e.g., 'GHSA-jfh8-c2jp-5v3q') or CVE ID (e.g., 'CVE-2021-44228')"
    }
  },
  "required": [
    "id"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
ghsa_searchSearch GitHub Advisory Database for security advisories. Filter by ecosystem (npm, pip, maven, etc.), severity, or CVE/GHSA ID.
Input schema
{
  "type": "object",
  "properties": {
    "keyword": {
      "type": "string",
      "description": "GHSA ID (GHSA-xxx) or CVE ID (CVE-xxx) to search for"
    },
    "ecosystem": {
      "type": "string",
      "enum": [
        "npm",
        "pip",
        "maven",
        "nuget",
        "rubygems",
        "go",
        "composer",
        "rust",
        "pub",
        "erlang",
        "actions",
        "swift"
      ],
      "description": "Package ecosystem filter"
    },
    "severity": {
      "type": "string",
      "enum": [
        "critical",
        "high",
        "medium",
        "low"
      ],
      "description": "Severity filter"
    },
    "limit": {
      "type": "number",
      "description": "Max results (default 20)"
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
kev_checkCheck if CVE(s) are in CISA's Known Exploited Vulnerabilities (KEV) catalog. KEV entries are actively exploited in the wild and require urgent patching.
Input schema
{
  "type": "object",
  "properties": {
    "cve": {
      "type": "string",
      "description": "CVE ID(s), comma-separated for multiple (e.g., 'CVE-2024-3400,CVE-2021-44228')"
    }
  },
  "required": [
    "cve"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
kev_recentGet recently added entries to CISA KEV catalog. Monitor for newly confirmed actively-exploited vulnerabilities.
Input schema
{
  "type": "object",
  "properties": {
    "days": {
      "type": "number",
      "description": "Look back period in days (default 30)"
    },
    "limit": {
      "type": "number",
      "description": "Max results (default 20)"
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
kev_searchSearch CISA KEV catalog by vendor, product, or keyword. Find known exploited vulnerabilities for specific technologies.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "Search keyword in vulnerability name or description"
    },
    "vendor": {
      "type": "string",
      "description": "Vendor/project name (e.g., 'Microsoft', 'Apache')"
    },
    "product": {
      "type": "string",
      "description": "Product name (e.g., 'Exchange Server', 'Log4j')"
    },
    "limit": {
      "type": "number",
      "description": "Max results (default 50)"
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
msf_checkCheck if a Metasploit exploit module exists for a CVE. If a module exists, the vulnerability is weaponized and should be prioritized for patching.
Input schema
{
  "type": "object",
  "properties": {
    "cveId": {
      "type": "string",
      "description": "CVE ID (e.g., 'CVE-2024-3400')"
    }
  },
  "required": [
    "cveId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
nuclei_checkCheck if a Nuclei detection template exists for a CVE. Nuclei templates from ProjectDiscovery enable automated vulnerability scanning. Returns template URL, severity, and tags.
Input schema
{
  "type": "object",
  "properties": {
    "cveId": {
      "type": "string",
      "description": "CVE ID (e.g., 'CVE-2024-3400')"
    }
  },
  "required": [
    "cveId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
nvd_getGet full details for a specific CVE from NVD — CVSS score, severity, CWE, affected products (CPE), references, and status.
Input schema
{
  "type": "object",
  "properties": {
    "cveId": {
      "type": "string",
      "description": "CVE identifier (e.g., 'CVE-2024-3400')"
    }
  },
  "required": [
    "cveId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
nvd_recentGet recently published or modified CVEs from NVD. Useful for monitoring new vulnerabilities.
Input schema
{
  "type": "object",
  "properties": {
    "days": {
      "type": "number",
      "description": "Look back period in days (default 7, max 120)"
    },
    "severity": {
      "type": "string",
      "enum": [
        "CRITICAL",
        "HIGH",
        "MEDIUM",
        "LOW"
      ],
      "description": "Filter by CVSS v3 severity"
    },
    "limit": {
      "type": "number",
      "description": "Max results (default 20)"
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
nvd_searchSearch the NVD (National Vulnerability Database) for CVEs by keyword, CVSS severity, CWE ID, or date range. Returns matching CVEs with CVSS scores, descriptions, and affected products.
Input schema
{
  "type": "object",
  "properties": {
    "keyword": {
      "type": "string",
      "description": "Search keyword (e.g., 'command injection', 'Apache')"
    },
    "severity": {
      "type": "string",
      "enum": [
        "CRITICAL",
        "HIGH",
        "MEDIUM",
        "LOW"
      ],
      "description": "Filter by CVSS v3 severity"
    },
    "cweId": {
      "type": "string",
      "description": "Filter by CWE ID (e.g., 'CWE-79')"
    },
    "startDate": {
      "type": "string",
      "description": "Start date for last modified range (ISO format)"
    },
    "endDate": {
      "type": "string",
      "description": "End date for last modified range (ISO format)"
    },
    "limit": {
      "type": "number",
      "description": "Max results (default 20, max 100)"
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
osv_batchBatch query OSV for vulnerabilities across multiple packages at once. Efficient for scanning a dependency list.
Input schema
{
  "type": "object",
  "properties": {
    "queries": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "package": {
            "type": "string",
            "description": "Package name"
          },
          "version": {
            "type": "string",
            "description": "Package version"
          },
          "ecosystem": {
            "type": "string",
            "description": "Package ecosystem"
          }
        },
        "required": [
          "package",
          "version",
          "ecosystem"
        ],
        "additionalProperties": false
      },
      "description": "Array of package queries"
    }
  },
  "required": [
    "queries"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
osv_getGet full vulnerability details from OSV by ID. Accepts OSV IDs (OSV-xxx), GHSA IDs (GHSA-xxx), CVE IDs (CVE-xxx), or ecosystem-specific IDs (PYSEC-xxx, RUSTSEC-xxx).
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "Vulnerability ID (e.g., 'GHSA-jfh8-c2jp-5v3q', 'CVE-2021-44228')"
    }
  },
  "required": [
    "id"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
osv_queryQuery Google OSV for known vulnerabilities affecting a specific package version. Supports all major ecosystems (npm, PyPI, Maven, Go, etc.).
Input schema
{
  "type": "object",
  "properties": {
    "package": {
      "type": "string",
      "description": "Package name (e.g., 'lodash', 'django', 'log4j-core')"
    },
    "version": {
      "type": "string",
      "description": "Package version (e.g., '4.17.20', '3.2.1')"
    },
    "ecosystem": {
      "type": "string",
      "enum": [
        "npm",
        "PyPI",
        "Go",
        "Maven",
        "NuGet",
        "Packagist",
        "RubyGems",
        "crates.io",
        "Hex",
        "Pub"
      ],
      "description": "Package ecosystem"
    }
  },
  "required": [
    "package",
    "version",
    "ecosystem"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
shodan_cveLook up a CVE via Shodan CVEDB (zero-auth). Returns CVSS score, EPSS probability, KEV status, affected CPEs, and references — all in one call without any API key.
Input schema
{
  "type": "object",
  "properties": {
    "cveId": {
      "type": "string",
      "description": "CVE ID (e.g., 'CVE-2024-3400')"
    }
  },
  "required": [
    "cveId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
shodan_ip_vulnsGet known vulnerabilities for an IP address via Shodan InternetDB. Returns open ports, hostnames, CPEs, CVE IDs, and tags. No API key required.
Input schema
{
  "type": "object",
  "properties": {
    "ip": {
      "type": "string",
      "description": "IP address (e.g., '8.8.8.8')"
    }
  },
  "required": [
    "ip"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
shodan_productFind CVEs affecting a specific product or vendor via Shodan CVEDB. No API key required. Returns CVEs with CVSS, EPSS, and KEV status.
Input schema
{
  "type": "object",
  "properties": {
    "product": {
      "type": "string",
      "description": "Product name (e.g., 'Apache HTTP Server', 'OpenSSL')"
    },
    "count": {
      "type": "number",
      "description": "Max results (default 20)"
    },
    "is_kev": {
      "type": "boolean",
      "description": "Filter to only KEV entries"
    }
  },
  "required": [
    "product"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
vulncheck_cpeSearch for vulnerabilities by CPE (Common Platform Enumeration) string via VulnCheck. Useful for finding all CVEs affecting a specific software version.
Input schema
{
  "type": "object",
  "properties": {
    "cpe": {
      "type": "string",
      "description": "CPE string (e.g., 'cpe:2.3:a:apache:http_server:2.4.49:*:*:*:*:*:*:*')"
    }
  },
  "required": [
    "cpe"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
vulncheck_kevCheck VulnCheck's extended KEV catalog for a CVE. Contains ~80% more entries than CISA KEV, including exploit maturity and ransomware association data.
Input schema
{
  "type": "object",
  "properties": {
    "cve": {
      "type": "string",
      "description": "CVE ID (e.g., 'CVE-2024-3400')"
    }
  },
  "required": [
    "cve"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
vulncheck_purlSearch for vulnerabilities by Package URL (purl) via VulnCheck. Supports all major ecosystems (npm, PyPI, Maven, Go, etc.).
Input schema
{
  "type": "object",
  "properties": {
    "purl": {
      "type": "string",
      "description": "Package URL (e.g., 'pkg:npm/lodash@4.17.20')"
    }
  },
  "required": [
    "purl"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
vulners_lookupLook up a CVE in Vulners database. Returns detailed vulnerability information including exploit references, CVSS scores, and related advisories from 200+ sources.
Input schema
{
  "type": "object",
  "properties": {
    "cveId": {
      "type": "string",
      "description": "CVE ID (e.g., 'CVE-2024-3400')"
    }
  },
  "required": [
    "cveId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
vulners_searchFull-text vulnerability search across 200+ sources via Vulners. Search for exploits, advisories, patches, and vulnerability reports by keyword.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "Search query (e.g., 'Apache RCE 2024', 'log4j exploit')"
    },
    "limit": {
      "type": "number",
      "description": "Max results (default 20, max 100)"
    },
    "type": {
      "type": "string",
      "description": "Filter by document type (e.g., 'exploit', 'cve', 'advisory')"
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——

Resources 0

  • None observed.

Resource templates 0

  • None observed.

Prompts 0

  • None observed.

Remote endpoints

EndpointTransportAuthenticationHealthObserved
No verified remote endpoint is linked.

cve-mcp Server questions

How do I install cve-mcp Server?

Install the selected package version with: npm install --save-exact cve-mcp@0.2.0

What tools does cve-mcp Server provide?

cve-mcp Server exposed 41 tools during independent protocol observation, including attackerkb_assess, circl_cve, cpe_match, cpe_search, cve_by_product, cve_compare, cve_enrich, cve_list_sources, and others.

Is cve-mcp Server secure?

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

Explore related MCP server guides

Curated product and capability guides containing this catalog record.

GitHub MCP ServersOfficial vs Community MCP Servers

Let’s talk about MCP security.

Share your details and our security team will contact you.