Nist Nvd MCP Server
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Connect it
Settings → Connectors → Add custom connector
URL: https://nist-nvd.caseyjhand.com/mcpSettings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://nist-nvd.caseyjhand.com/mcp{
"mcpServers": {
"nist-nvd-mcp-server": {
"url": "https://nist-nvd.caseyjhand.com/mcp"
}
}
}claude mcp add --transport http nist-nvd-mcp-server https://nist-nvd.caseyjhand.com/mcp{
"servers": {
"nist-nvd-mcp-server": {
"type": "http",
"url": "https://nist-nvd.caseyjhand.com/mcp"
}
}
}{
"mcpServers": {
"nist-nvd-mcp-server": {
"command": "npx",
"args": [
"-y",
"@cyanheads/nist-nvd-mcp-server@0.3.2"
]
}
}
}claude mcp add nist-nvd-mcp-server -- npx -y @cyanheads/nist-nvd-mcp-server@0.3.25 tools, verified live
nvd_get_cveread-onlyFetch one or more CVEs by ID from the NIST National Vulnerability Database. Returns CVSS scores across all available versions (v2.0, v3.0, v3.1, v4.0), CWE weakness classifications, affected CPE configurations, CISA KEV fields, and references. Up to 100 CVE IDs per call. For bulk lookups of more than 10 IDs, use brief: true â full records for 100 CVEs can exceed 1MB and exhaust context budgets.
nvd_search_cvesread-onlySearch CVEs by keyword, severity, CWE, date range, or CISA KEV status. The primary discovery tool for vulnerability surveillance and triage workflows. pubDays and lastModDays are convenience shorthands that expand to date pairs; values over 120 days are clamped to the NVD maximum and reported in the response enrichment. Returns brief summaries â call nvd_get_cve for full detail on specific IDs.
nvd_audit_cperead-onlyFind all CVEs affecting a specific product and version using CPE (Common Platform Enumeration). Requires either an exact CPE name (cpeName) or a partial match string (virtualMatchString) with optional version range bounds. With cpeName, NVD scopes results to configurations where the product is directly vulnerable, not merely referenced as a dependency. Use nvd_search_cpes first to resolve the corr
nvd_search_cpesread-onlySearch the NVD CPE (Common Platform Enumeration) dictionary by product keyword or partial match string. Returns CPE names, human-readable titles, and deprecation status. Use before nvd_audit_cpe to resolve the correct CPE name for a product â CPE strings are precise identifiers (e.g., cpe:2.3:a:apache:http_server:2.4.51:*:*:*:*:*:*:*) and must match exactly to audit the right product.
nvd_get_cve_historyread-onlyRetrieve the change history for a single CVE â CVSS score revisions, reference additions, status transitions (e.g., "Received" â "Analyzed"), and CPE configuration updates. Use when tracking a CVE's escalation or investigating when a score changed. Events are returned newest-first by default; pass order="oldest" for the CVE's earliest events. For the current record, call nvd_get_cve instead. T
Alternatives in Search & Research
Compare →
runxA
The governed runtime for agent skills. Search the catalog and inspect a skill before running it.
DODocsA
Search and read Empryo's documentation. Read-only, no auth, no local access.
MUMuA
News, web search, mail, markets, weather, places, files, calendar, contacts. 67 tools, one endpoint.
FRFerritin — Rust documentationA
Search and read Rust documentation for the standard library and any crate on crates.io
RTRef Tools MCPA
Token-efficient search for coding agents over public and private documentation.
FBfojin — Buddhist Canon ToolsA
Buddhist canon tools: search, passages, cross-canon parallels, dictionaries — all URN-cited.