cve-search_mcp

Overview

This MCP server serves as a bridge between AI assistants and the CVE-Search API, enabling comprehensive vulnerability database access. It supports querying vendors, products, specific CVE IDs, and recent vulnerabilities with CAPEC, CWE, and CPE expansions. The server implements proper MCP protocol structure, making it compatible with various AI clients like Cline and Roo Code. The code is written in Python using modern dependency management with uv, indicating good development practices.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• get_vendors

  Get a JSON with all the vendors

  Try:List all vendors available in the CVE databaseTry:Get me all vendors
• get_products

  Get a JSON with all the products associated to a vendor

  Try:List all products for MicrosoftTry:Get products for a specific vendor
• get_vulnerabilities

  Get a JSON with all the vulnerabilities per vendor and a specific product

  Try:Find vulnerabilities in Microsoft WindowsTry:Get vulnerabilities for Apache products
• get_cve_by_id

  Get a JSON of a specific CVE ID

  Try:Get details for CVE-2021-44228Try:Retrieve information about CVE-2023-23397
• get_last_cves

  Get a JSON of the last 30 CVEs including CAPEC, CWE and CPE expansions

  Try:Show me the latest 30 CVEsTry:Get the most recent CVEs with details
• get_database_info

  Get more information about the current databases in use and when it was updated

  Try:When was the CVE database last updated?Try:Get information about the current databases

Comparable tools

Installation

git clone https://github.com/roadwy/cve-search_mcp.git
cd cve-search_mcp

uv sync

{
  "cve-search_mcp": {
    "command": "uv",
    "args": [
      "--directory",
      "YOUR_CVE_SEARCH_MCP_DIR_PATH",
      "run",
      "main.py"
    ],
    "disabled": false,
    "autoApprove": []
  }
}

{
  "mcpServers": {
    "cve-search": {
      "command": "uv",
      "args": [
        "--directory",
        "/path/to/cve-search_mcp",
        "run",
        "main.py"
      ]
    }
  }
}

FAQ

What data sources does this MCP server use?

The server queries the CVE-Search API, which provides access to the CVE (Common Vulnerabilities and Exposures) database maintained by MITRE.

Can I get vulnerability information for specific vendors and products?

Yes, the server provides tools to get all vendors, all products associated with a vendor, and vulnerabilities per vendor and product.

Compare cve-search_mcp with