cve-search_mcp

概述

这个MCP服务器连接AI助手与CVE-Search API，提供全面的漏洞数据库访问功能。它支持查询供应商、产品、特定CVE ID以及最近的漏洞信息，包含CAPEC、CWE和CPE扩展。服务器正确实现了MCP协议结构，与多种AI客户端（如Cline和Roo Code）兼容。代码使用Python编写，采用uv进行依赖管理，体现了良好的开发实践。

试试问 AI

装完之后，这里有 5 个你可以让 AI 做的事：

• get_vendors

  Get a JSON with all the vendors

  试试:List all vendors available in the CVE database试试:Get me all vendors
• get_products

  Get a JSON with all the products associated to a vendor

  试试:List all products for Microsoft试试:Get products for a specific vendor
• get_vulnerabilities

  Get a JSON with all the vulnerabilities per vendor and a specific product

  试试:Find vulnerabilities in Microsoft Windows试试:Get vulnerabilities for Apache products
• get_cve_by_id

  Get a JSON of a specific CVE ID

  试试:Get details for CVE-2021-44228试试:Retrieve information about CVE-2023-23397
• get_last_cves

  Get a JSON of the last 30 CVEs including CAPEC, CWE and CPE expansions

  试试:Show me the latest 30 CVEs试试:Get the most recent CVEs with details
• get_database_info

  Get more information about the current databases in use and when it was updated

  试试:When was the CVE database last updated?试试:Get information about the current databases

可对比工具

安装

git clone https://github.com/roadwy/cve-search_mcp.git
cd cve-search_mcp

uv sync

{
  "cve-search_mcp": {
    "command": "uv",
    "args": [
      "--directory",
      "YOUR_CVE_SEARCH_MCP_DIR_PATH",
      "run",
      "main.py"
    ],
    "disabled": false,
    "autoApprove": []
  }
}

{
  "mcpServers": {
    "cve-search": {
      "command": "uv",
      "args": [
        "--directory",
        "/path/to/cve-search_mcp",
        "run",
        "main.py"
      ]
    }
  }
}

FAQ

这个MCP服务器使用哪些数据源？

服务器查询CVE-Search API，该API提供由MITRE维护的CVE（通用漏洞和披露）数据库的访问权限。

我可以获取特定供应商和产品的漏洞信息吗？

是的，服务器提供获取所有供应商、与供应商关联的所有产品以及每个供应商和产品漏洞的工具。

cve-search_mcp 对比