NVD Database MCP Server logo

NVD Database MCP Server

by marcoeg

This is a Model Context Protocol (MCP) server that allows querying the NIST National Vulnerability Database (NVD) via its API. It requires an NVD API key to function.

View on GitHub

Last updated: N/A

What is NVD Database MCP Server?

The NVD Database MCP Server is an implementation of the Model Context Protocol designed to interact with the NIST National Vulnerability Database (NVD). It provides tools to retrieve and search for vulnerability information.

How to use NVD Database MCP Server?

To use the server, you need to configure it with an NVD API key and integrate it with an MCP-compliant client like Claude Desktop. Configuration involves modifying the client's configuration file to point to the server's executable and setting the API key as an environment variable. Once configured, you can use the provided tools (get_cve and search_cve) to query the NVD database.

Key features of NVD Database MCP Server

  • Query specific CVEs by ID with detailed vulnerability data.

  • Search the NVD database by keyword with customizable result options.

  • Supports Server-Sent Events (SSE) transport for real-time communication.

  • Compatible with MCP-compliant clients like Claude Desktop.

Use cases of NVD Database MCP Server

  • Integrating vulnerability data into AI assistants.

  • Automated security assessments.

  • Real-time vulnerability monitoring.

  • Enriching security reports with NVD data.

FAQ from NVD Database MCP Server

What is an NVD API key and how do I get one?

An NVD API key is required to access the NIST National Vulnerability Database (NVD) API. You can request one from the NVD website: https://nvd.nist.gov/developers/request-an-api-key.

What is the Model Context Protocol (MCP)?

The Model Context Protocol (MCP) is a protocol for communication between applications and models. See https://modelcontextprotocol.io/ for more information.

How do I configure the server with Claude Desktop?

You need to modify the Claude Desktop configuration file (claude_desktop_config.json) to include the server's command, arguments, and environment variables (including the NVD API key).

What are the available tools and their parameters?

The server provides two tools: get_cve (takes cve_id and concise parameters) and search_cve (takes keyword, exact_match, concise, and results parameters).

How do I run the server with SSE transport?

Use the command uv run mcp-nvd --transport sse --port <port> to run the server with SSE transport on the specified port.