servers / cve-mcp
cve-mcp
communitystdiolocalverifiedhealthy
23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.
01Tools · 41
How to read this: tool names here are observed from a live tools/list handshake. The Risk label is a heuristic inferred from the tool name (write/destructive verbs), not from executing the tool — a conservative guess, not a verified capability. We never escalate risk from a description. Found one that's wrong? Tell us — we fix on report.
| Tool | Risk | Side effects | Approval |
|---|---|---|---|
| cwe_top25 Get the MITRE CWE Top 25 Most Dangerous Software Weaknesses for a given year. Shows the most impactful vulnerability classes ranked by frequency and severity. | read | false | unknown |
| ghsa_get Get full details of a GitHub security advisory by GHSA ID or CVE ID. Includes affected packages, CVSS, and patch information. | read | false | unknown |
| nvd_recent Get recently published or modified CVEs from NVD. Useful for monitoring new vulnerabilities. | read | false | unknown |
| osv_query Query Google OSV for known vulnerabilities affecting a specific package version. Supports all major ecosystems (npm, PyPI, Maven, Go, etc.). | read | false | unknown |
| exploit_search Search for public PoC exploits and exploit code for a CVE on GitHub. Returns repositories with proof-of-concept code, sorted by stars. | read | false | unknown |
| cwe_hierarchy Get CWE parent/child hierarchy. Shows which weaknesses are more general (parents) and more specific (children) variants of a given CWE. | read | false | unknown |
| shodan_cve Look up a CVE via Shodan CVEDB (zero-auth). Returns CVSS score, EPSS probability, KEV status, affected CPEs, and references — all in one call without any API key. | read | false | unknown |
| vulncheck_kev Check VulnCheck's extended KEV catalog for a CVE. Contains ~80% more entries than CISA KEV, including exploit maturity and ransomware association data. | unknown | unknown | unknown |
| vulners_lookup Look up a CVE in Vulners database. Returns detailed vulnerability information including exploit references, CVSS scores, and related advisories from 200+ sources. | read | false | unknown |
| vulncheck_cpe Search for vulnerabilities by CPE (Common Platform Enumeration) string via VulnCheck. Useful for finding all CVEs affecting a specific software version. | read | false | unknown |
| msf_check Check if a Metasploit exploit module exists for a CVE. If a module exists, the vulnerability is weaponized and should be prioritized for patching. | unknown | unknown | unknown |
| cve_trending Get currently trending/hot CVEs — vulnerabilities with the highest exploitation probability right now. Combines EPSS scores with NVD details and KEV status. | read | false | unknown |
| cve_compare Compare two CVEs side by side. Shows CVSS, EPSS, KEV status, affected products, and risk scores with a comparison summary highlighting which is more dangerous. | read | false | unknown |
| kev_search Search CISA KEV catalog by vendor, product, or keyword. Find known exploited vulnerabilities for specific technologies. | read | false | unknown |
| cve_prioritize Rank a list of CVEs by exploitation risk. Combines CVSS score, EPSS probability, KEV status, and weaponization signals (Nuclei/Metasploit modules) into a unified risk score. Higher score = patch first. | read | false | unknown |
| shodan_ip_vulns Get known vulnerabilities for an IP address via Shodan InternetDB. Returns open ports, hostnames, CPEs, CVE IDs, and tags. No API key required. | read | false | unknown |
| cve_to_attack Map CWE weakness IDs to MITRE ATT&CK techniques. Shows which attack techniques a vulnerability enables, useful for threat modeling and detection engineering. | unknown | unknown | unknown |
| cwe_get Get full CWE details from the MITRE CWE REST API. Returns name, description, related weaknesses, applicable platforms, consequences, detection methods, and mitigations for any of the 1000+ CWEs. | read | false | unknown |
| cwe_lookup Look up a CWE (Common Weakness Enumeration) by ID or search by keyword. Returns name, description, and category for the top 40+ most common CWEs. | read | false | unknown |
| nvd_get Get full details for a specific CVE from NVD — CVSS score, severity, CWE, affected products (CPE), references, and status. | read | false | unknown |
| shodan_product Find CVEs affecting a specific product or vendor via Shodan CVEDB. No API key required. Returns CVEs with CVSS, EPSS, and KEV status. | read | false | unknown |
| circl_cve Get CVE details from CIRCL (Computer Incident Response Center Luxembourg). Returns CAPEC attack patterns, vulnerable products, and access/impact vectors. No API key required. | read | false | unknown |
| cve_by_product Search CVEs by vendor or product name. Uses NVD keyword exact match to find all vulnerabilities for a specific technology (e.g., 'Apache Log4j', 'Microsoft Exchange'). | read | false | unknown |
| kev_check Check if CVE(s) are in CISA's Known Exploited Vulnerabilities (KEV) catalog. KEV entries are actively exploited in the wild and require urgent patching. | unknown | unknown | unknown |
| attackerkb_assess Get community assessments for a CVE from AttackerKB. Shows attacker value, exploitability ratings, and Rapid7 analysis from security researchers. | read | false | unknown |
| epss_top Get the top CVEs ranked by EPSS exploitation probability. Shows the most likely-to-be-exploited vulnerabilities. | read | false | unknown |
| cpe_match Get CPE match criteria for a specific CVE from NVD. Shows exactly which product versions are affected, including version ranges. | read | false | unknown |
| cve_list_sources List all vulnerability data sources and their current availability. Shows which APIs are reachable and whether optional API keys are configured. Covers 11 sources: NVD, EPSS, KEV, GHSA, OSV, Shodan, VulnCheck, Vulners, CIRCL, AttackerKB, MITRE CWE. | read | false | unknown |
| vulners_search Full-text vulnerability search across 200+ sources via Vulners. Search for exploits, advisories, patches, and vulnerability reports by keyword. | read | false | unknown |
| vulncheck_purl Search for vulnerabilities by Package URL (purl) via VulnCheck. Supports all major ecosystems (npm, PyPI, Maven, Go, etc.). | read | false | unknown |
| nuclei_check Check if a Nuclei detection template exists for a CVE. Nuclei templates from ProjectDiscovery enable automated vulnerability scanning. Returns template URL, severity, and tags. | read | false | unknown |
| cve_report Generate a markdown vulnerability report for a list of CVEs. Includes NVD details, EPSS scores, KEV status, and remediation priority. | read | false | unknown |
| osv_get Get full vulnerability details from OSV by ID. Accepts OSV IDs (OSV-xxx), GHSA IDs (GHSA-xxx), CVE IDs (CVE-xxx), or ecosystem-specific IDs (PYSEC-xxx, RUSTSEC-xxx). | read | false | unknown |
| cpe_search Search the NVD CPE (Common Platform Enumeration) dictionary by keyword. Find standardized product identifiers for use in vulnerability queries. | read | false | unknown |
| kev_recent Get recently added entries to CISA KEV catalog. Monitor for newly confirmed actively-exploited vulnerabilities. | read | false | unknown |
| osv_batch Batch query OSV for vulnerabilities across multiple packages at once. Efficient for scanning a dependency list. | read | false | unknown |
| cvss_parse Parse a CVSS v3.x or v4.0 vector string into a human-readable breakdown. Explains each metric, calculates the base score, and provides a plain-English summary. Supports both CVSS:3.1 and CVSS:4.0 format. | unknown | unknown | unknown |
| cve_enrich Full CVE enrichment — queries NVD, EPSS, KEV, GitHub Advisory, OSV, Shodan CVEDB, VulnCheck, Nuclei Templates, and Metasploit in parallel for comprehensive vulnerability intelligence. Returns CVSS, exploitation probability, KEV status, affected packages, exploit availability, and a computed risk score. | read | false | unknown |
| nvd_search Search the NVD (National Vulnerability Database) for CVEs by keyword, CVSS severity, CWE ID, or date range. Returns matching CVEs with CVSS scores, descriptions, and affected products. | read | false | unknown |
| epss_score Get EPSS (Exploit Prediction Scoring System) score for one or more CVEs. Returns the probability of exploitation within 30 days and percentile ranking. | read | false | unknown |
| ghsa_search Search GitHub Advisory Database for security advisories. Filter by ecosystem (npm, pip, maven, etc.), severity, or CVE/GHSA ID. | read | false | unknown |
02Install & source
npx -y cve-mcp
npx- repohttps://github.com/badchars/cve-mcp
- homepagehttps://www.npmjs.com/package/cve-mcp
- licenseMIT
- adoption19 stars · 4 forks
05Provenance & freshness
sourcesGitHub repo search [p4]
last_checked2026-08-16 21:02Z
next_check2026-08-17 00:00Z
cadenceevery 3h
verifiedtools_list:passed handshake:passed metadata:passed tools_list:passed handshake:passed metadata:passed tools_list:passed handshake:passed metadata:passed tools_list:passed
index_statusindex — 8 unique facts >= 5
06Badge
Add the “as seen on MCPExplorer” badge to your README. 
[](https://mcpexplorer.com/servers/cve-mcp)
Next step
This is one server. A loadout combines the right servers, governance, and proven plays for a whole job — assembled deliberately, not tool-dumped.
Explore loadouts →