MCP server

Nist Nvd

io.github.cyanheads/nist-nvd-mcp-server

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Working at last check

Tools

5

Token cost

About 3,212 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http nist-nvd-mcp-server https://nist-nvd.caseyjhand.com/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.nist-nvd-mcp-server]
url = "https://nist-nvd.caseyjhand.com/mcp"

Gemini CLI

{"mcpServers":{"nist-nvd-mcp-server":{"httpUrl":"https://nist-nvd.caseyjhand.com/mcp"}}}

Cursor

{"mcpServers":{"nist-nvd-mcp-server":{"url":"https://nist-nvd.caseyjhand.com/mcp"}}}

VS Code

{"servers":{"nist-nvd-mcp-server":{"type":"http","url":"https://nist-nvd.caseyjhand.com/mcp"}}}

Antigravity

agy mcp add nist-nvd-mcp-server https://nist-nvd.caseyjhand.com/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"nist-nvd-mcp-server","server_url":"https://nist-nvd.caseyjhand.com/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"nist-nvd-mcp-server","server_url":"https://nist-nvd.caseyjhand.com/mcp"}

Tools

• nvd_audit_cpe ~816 tokens
  Find all CVEs affecting a specific product and version using CPE (Common Platform Enumeration). Requires either an exact CPE name (cpeName) or a partial match string (virtualMatchString) with optional version range bounds. With cpeName, NVD scopes results to configurations where the product is direc
• nvd_get_cve ~546 tokens
  Fetch one or more CVEs by ID from the NIST National Vulnerability Database. Returns CVSS scores across all available versions (v2.0, v3.0, v3.1, v4.0), CWE weakness classifications, affected CPE configurations, CISA KEV fields, current SSVC assessments, and references. Up to 100 CVE IDs per call. Fo
• nvd_get_cve_history ~522 tokens
  Retrieve the change history for a single CVE — CVSS score revisions, reference additions, status transitions (e.g., "Received" → "Analyzed"), and CPE configuration updates. Use when tracking a CVE's escalation or investigating when a score changed. Events are returned newest-first by default; pass o
• nvd_search_cpes ~402 tokens
  Search the NVD CPE (Common Platform Enumeration) dictionary by product keyword or partial match string. Returns CPE names, human-readable titles, and deprecation status. Use before nvd_audit_cpe to resolve the correct CPE name for a product — CPE strings are precise identifiers (e.g., cpe:2.3:a:apac
• nvd_search_cves ~926 tokens
  Search CVEs by keyword, severity, CWE, date range, or CISA KEV status. The primary discovery tool for vulnerability surveillance and triage workflows. pubDays and lastModDays expand to date pairs; values over 120 days are clamped to the NVD maximum and reported in the response enrichment. Returns br

Browse

• GitHub tools
• Company data
• GitHub and code hosting
• Databases
• Security scanning

Related MCP servers

• X402 Endpoints
  x402 paid API tools for AI agents on Base: EU/global registries, crypto, wallet & agent trust.
• Security Intel MCP
  CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
• Genexxis agent data APIs
  49 paid x402 tools for agents: sanctions, SEC filings, perps, yields, DeFi, gas, odds, audits.
• DataNexus MCP
  Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.
• SiteCheck Web Intel
  129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402
• Web Search & Data API
  Web search, scraping, Google Trends and data lookups. Paid per call in USDC on Base via x402.
• ScanLabsAI Security Scanner
  Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
• The Stall
  277 pay-per-call MCP tools: YouTube keyword research, stocks, crypto, DeFi, options, macro.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.cyanheads/nist-nvd-mcp-server.svg)](https://aptlynx.net/servers/io.github.cyanheads/nist-nvd-mcp-server)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents