MCP NVD

MCP server that retrieves CVE information

python

7

GitHub Stars

python

Language

6 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "gkhays-mcp-nvd-server": {
      "command": "npx",
      "args": [
        "@modelcontextprotocol/inspector",
        "uv",
        "--directory",
        "/path/to/mcp-nvd",
        "run",
        "mcp-nvd"
      ]
    }
  }
}

A MCP NVD Server retrieves CVE information from the National Vulnerability Database (NVD) to help you monitor and respond to security advisories. It exposes a straightforward way to run locally and inspect CVE data programmatically, so you can integrate NVD data into your security workflows.

How to use

You run the MCP NVD Server as a local process and use an MCP client to request CVE information. Start the server in your environment, then query for CVEs by their identifiers or by relevant criteria. The inspector tooling lets you launch and verify the server quickly, ensuring the server responds and returns CVE details, descriptions, and references when you request a known CVE.

How to install

Prerequisites you need before running the server are installed in your environment.

uv sync

After dependencies are synchronized, you can verify the server can be inspected and debugged using the MCP Inspector.

npx @modelcontextprotocol/inspector uv --directory /path/to/mcp-nvd run mcp-nvd

Debugging

Use the MCP Inspector to validate the MCP NVD Server behavior during development and troubleshooting.

npx @modelcontextprotocol/inspector uv --directory /path/to/mcp-nvd run mcp-nvd

Testing

Automated tests are performed with pytest to verify CVE fetching, description parsing, and references handling. Run test suites to ensure the server returns expected data for sample CVEs.

Available tools

inspector

Launch the MCP Inspector to run and debug the MCP NVD Server; validate server responses and data flow.

pytest

Run unit tests to verify CVE fetching, description parsing, and reference handling.