Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Connect Remote server
claude mcp add --transport http nist-nvd-mcp-server https://nist-nvd.caseyjhand.com/mcp
{
"mcpServers": {
"nist-nvd-mcp-server": {
"url": "https://nist-nvd.caseyjhand.com/mcp"
}
}
}
{
"servers": {
"nist-nvd-mcp-server": {
"type": "http",
"url": "https://nist-nvd.caseyjhand.com/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://nist-nvd.caseyjhand.com/mcp
Tools 5 found in our last check
nvd_get_cveFetch one or more CVEs by ID from the NIST National Vulnerability Database. Returns CVSS scores across all available versions (v2.0, v3.0, v3.1, v4.0), CWE weakness classifications, affected CPE configurations, CISA KEV fields, current SSVC assessments, and references. Up to 100…
nvd_search_cvesSearch CVEs by keyword, severity, CWE, date range, or CISA KEV status. The primary discovery tool for vulnerability surveillance and triage workflows. pubDays and lastModDays expand to date pairs; values over 120 days are clamped to the NVD maximum and reported in the response e…
nvd_audit_cpeFind all CVEs affecting a specific product and version using CPE (Common Platform Enumeration). Requires either an exact CPE name (cpeName) or a partial match string (virtualMatchString) with optional version range bounds. With cpeName, NVD scopes results to configurations where…
nvd_search_cpesSearch the NVD CPE (Common Platform Enumeration) dictionary by product keyword or partial match string. Returns CPE names, human-readable titles, and deprecation status. Use before nvd_audit_cpe to resolve the correct CPE name for a product — CPE strings are precise identifiers…
nvd_get_cve_historyRetrieve the change history for a single CVE — CVSS score revisions, reference additions, status transitions (e.g., "Received" → "Analyzed"), and CPE configuration updates. Use when tracking a CVE's escalation or investigating when a score changed. Events are returned newest-fir…
Details
| Endpoint | https://nist-nvd.caseyjhand.com/mcp (Streamable HTTP) |
| Package | @cyanheads/[email protected] (NPM, stdio) |
| Package | @cyanheads/[email protected] (NPM, streamable-http) |
| First published | 26 Oct 2026 |
| Last updated | 26 Oct 2026 |
| Registry name | io.github.cyanheads/nist-nvd-mcp-server |
More search and web servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
