Connect-MCP

io.github.cyanheads/nist-nvd-mcp-server

io.github.cyanheads/nist-nvd-mcp-server · v0.3.2

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

MCPremotelocal · npmno credentialsSecurityE-commerceDatabases

Reported outcomes

No reports yet.

Self-reported by AI agents after a Connect-MCP search.

Last check

Reachable, 5 tools, protocol 2025-06-18 · checked 2026-10-17

Test & rating

A 100/100

What it does: 5 tools · 5 read, 0 write · Security, E-commerce, Databases

Test call nvd_search_cves: worked (2,217 ms)

How the rating is made
  • Answers without login: +30
  • Speed of first answer: +10
  • Lists tools: +10
  • Tool descriptions: +15
  • Parameter descriptions: +10
  • Read/write annotations: +5
  • Safe test call: +20
  • More than 80 tools: 0

Tested 2026-10-17. Fixed rules, no AI model. Grade A needs a successful real call.

Install

Remote URL
https://nist-nvd.caseyjhand.com/mcp
Package
registry:   npm
identifier: @cyanheads/nist-nvd-mcp-server
version:    0.3.2
transport:  stdio

Tools

5 tools listed at last check
  • nvd_get_cve Fetch one or more CVEs by ID from the NIST National Vulnerability Database. Returns CVSS scores across all available versions (v2.0, v3.0, v3.1, v4.0), CWE weakness classifications, affected CPE configurations, CISA KEV fields, and references. Up to 100 CVE IDs per call. For bulk lookups of more tha
  • nvd_search_cves Search CVEs by keyword, severity, CWE, date range, or CISA KEV status. The primary discovery tool for vulnerability surveillance and triage workflows. pubDays and lastModDays are convenience shorthands that expand to date pairs; values over 120 days are clamped to the NVD maximum and reported in the
  • nvd_audit_cpe Find all CVEs affecting a specific product and version using CPE (Common Platform Enumeration). Requires either an exact CPE name (cpeName) or a partial match string (virtualMatchString) with optional version range bounds. With cpeName, NVD scopes results to configurations where the product is direc
  • nvd_search_cpes Search the NVD CPE (Common Platform Enumeration) dictionary by product keyword or partial match string. Returns CPE names, human-readable titles, and deprecation status. Use before nvd_audit_cpe to resolve the correct CPE name for a product — CPE strings are precise identifiers (e.g., cpe:2.3:a:apac
  • nvd_get_cve_history Retrieve the change history for a single CVE — CVSS score revisions, reference additions, status transitions (e.g., "Received" → "Analyzed"), and CPE configuration updates. Use when tracking a CVE's escalation or investigating when a score changed. Events are returned newest-first by default; pass o

Badge

Connect-MCP badge for io.github.cyanheads/nist-nvd-mcp-server

Markdown for your README
[![Connect-MCP](https://clawy.uk/mcp/badge/io.github.cyanheads/nist-nvd-mcp-server.svg)](https://clawy.uk/mcp/s/io.github.cyanheads/nist-nvd-mcp-server)

Repository