MCP NVD Server logo

MCP NVD Server

by gkhays

MCP server that retrieves CVE information from the national vulnerability database (NVD). It uses the Model Context Protocol (MCP).

View on GitHub

Last updated: N/A

What is MCP NVD Server?

This is an MCP server designed to fetch and provide CVE (Common Vulnerabilities and Exposures) data from the National Vulnerability Database (NVD). It allows applications using the Model Context Protocol to access up-to-date vulnerability information.

How to use MCP NVD Server?

  1. Install prerequisites: uv and Node.js.
  2. Synchronize dependencies using uv sync.
  3. Debug using MCP Inspector: npx @modelcontextprotocol/inspector uv --directory /path/to/mcp-nvd run mcp-nvd.
  4. Obtain an NVD API key from https://nvd.nist.gov/developers/request-an-api-key if you need to avoid rate limiting.

Key features of MCP NVD Server

  • CVE data retrieval

  • NVD integration

  • MCP compatibility

  • Rate limiting handling (API key support)

Use cases of MCP NVD Server

  • Security monitoring

  • Vulnerability assessment

  • Automated security analysis

  • Integration with security tools

FAQ from MCP NVD Server

What is CVE?

Common Vulnerabilities and Exposures - a list of publicly disclosed computer security flaws.

What is NVD?

National Vulnerability Database - the U.S. government repository of standards-based vulnerability management data.

What is MCP?

Model Context Protocol - a protocol for interacting with large language models.

Why do I need an API key?

To avoid rate limiting when accessing the NVD data.

Where can I find the MCP Inspector?

At https://github.com/modelcontextprotocol/inspector