HaroldFinchIFT/vuln-nist-mcp-server

Overview

An open-source MCP server that provides access to the National Vulnerability Database (NVD) API. It allows developers to query CVE data, retrieve vulnerability details, and integrate NVD information into MCP-compatible tools or assistants.

Best for

Best for
Developers needing programmatic access to NVD vulnerability data from MCP-compatible tools.

Use cases

• Query CVEs by keyword or CVE ID
• Fetch vulnerability details for security assessment
• Integrate NVD data into MCP-based workflows

How to use

Install

docker run --rm -it vuln-nist-mcp-server

Tools exposed

• get_temporal_context
• search_cves
• get_cve_by_id
• cves_by_cpe
• kevs_between
• cve_change_history

Tested with

Claude Desktop

Notes

An open-source MCP server that provides access to the National Vulnerability Database (NVD) API. It allows developers to query CVE data, retrieve vulnerability details, and integrate NVD information into MCP-compatible tools or assistants.

11 stars on GitHub. Last updated 2025-09-23. Licensed MIT.

Use cases

• Query CVEs by keyword or CVE ID
• Fetch vulnerability details for security assessment
• Integrate NVD data into MCP-based workflows

Pros

• Leverages the official NVD API for authoritative data
• Lightweight Python implementation easy to deploy
• Simple MCP protocol for seamless integration

Cons

• Depends on NVD API availability and rate limits
• Small community and limited documentation
• Requires MCP-compatible client to be useful

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.