Back to search
100
MCP live MCP 2026-07-28 streamable-http ext: skills

io.github.cyanheads/nist-nvd-mcp-server

io.github.cyanheads/nist-nvd-mcp-server

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

Watch this dependency Share evidence report
Uptime
100.0%
5 direct probes · 30d
Response
1383ms
last probe
Tools
5
callable
Resources
1
readable
Prompts
0
available
Primary URL
https://nist-nvd.caseyjhand.com/mcp
Score: 100/100
Handshake verified by our own probe.
pass Answers the MCP handshake 50/50
The handshake and the list calls succeeded on the primary URL.
pass Lists tools, resources or prompts 30/30
5 tools, 1 resources, 0 prompts returned.
pass 3 or more catalogue items 10/10
6 items in total; 3 or more earns these points.
pass Describes itself 10/10
83 characters; more than 30 earns these points.

Tools · 5

nvd_get_cve

Fetch one or more CVEs by ID from the NIST National Vulnerability Database. Returns CVSS scores across all available versions (v2.0, v3.0, v3.1, v4.0), CWE weakness classifications, affected CPE confi…

nvd_search_cves

Search CVEs by keyword, severity, CWE, date range, or CISA KEV status. The primary discovery tool for vulnerability surveillance and triage workflows. pubDays and lastModDays expand to date pairs; val…

nvd_audit_cpe

Find all CVEs affecting a specific product and version using CPE (Common Platform Enumeration). Requires either an exact CPE name (cpeName) or a partial match string (virtualMatchString) with optional…

nvd_search_cpes

Search the NVD CPE (Common Platform Enumeration) dictionary by product keyword or partial match string. Returns CPE names, human-readable titles, and deprecation status. Use before nvd_audit_cpe to re…

nvd_get_cve_history

Retrieve the change history for a single CVE — CVSS score revisions, reference additions, status transitions (e.g., "Received" → "Analyzed"), and CPE configuration updates. Use when tracking a CVE's e…

Resources · 1

nist-nvd-guide

Resolve product identities and assess vulnerability evidence with nvd_* tools. Use for product/version applicability, interpreting CVSS and KEV context, complete vulnerability surveillance, or investi…

skill://nist-nvd-guide/SKILL.md

Skills · 1

nist-nvd-guide

Resolve product identities and assess vulnerability evidence with nvd_* tools. Use for product/version applicability, interpreting CVSS and KEV context, complete vulnerability surveillance, or investi…

skill://nist-nvd-guide/SKILL.md
1 file

How to use

Claude Desktop or claude.ai: add a custom connector (Customize → Connectors; on Team and Enterprise plans an owner adds it under Organization settings → Connectors) with this server URL: https://nist-nvd.caseyjhand.com/mcp

Cursor or Cline: add to your MCP config:

{
  "mcpServers": {
    "io.github.cyanheads/nist-nvd-mcp-server": {
      "url": "https://nist-nvd.caseyjhand.com/mcp",
      "transport": "streamable-http"
    }
  }
}