CVE MCP Server

@xishir

About CVE MCP Server

A Model Context Protocol server providing CVE vulnerability information query capabilities. This server enables LLMs to query detailed information for specific CVE IDs, retrieving data from MITRE's CVE database.

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "cve-mcp-server": {
      "command": "uvx",
      "args": [
        "cve-mcp-server",
        "sse"
      ]
    }
  }
}

Tools

Query vulnerability information by CVE ID

Overview

What is CVE MCP Server?

CVE MCP Server is a Model Context Protocol server that enables LLMs to query detailed vulnerability information for specific CVE IDs. It retrieves data from MITRE's CVE database.

How to use CVE MCP Server?

Install via pip with pip install cve-mcp-server. Configure as stdio (default) using the command uvx cve-mcp-server, or run as an SSE server with uvx cve-mcp-server sse and connect via URL. The server exposes one tool, query_cve, which requires a cve_id string parameter.

Key features of CVE MCP Server

Queries vulnerability information by CVE ID.
Retrieves data from MITRE’s CVE database.
Exposes a single query_cve tool for LLM integration.
Supports both stdio and SSE transports.
Can be debugged with the MCP inspector.

Use cases of CVE MCP Server

An AI assistant answering security questions about a specific CVE.
Automating vulnerability lookup in CI/CD or incident response workflows.
Enriching LLM‑driven security analysis tools with real CVE data.

FAQ from CVE MCP Server

What tools does CVE MCP Server provide?

It provides one tool, query_cve, which takes a required cve_id parameter (e.g., 'CVE-2021-44228').

How do I install CVE MCP Server?

Install it via pip: pip install cve-mcp-server.

What transports does CVE MCP Server support?

It supports stdio (default) and SSE. For stdio, run uvx cve-mcp-server; for SSE, run uvx cve-mcp-server sse.

Where does CVE MCP Server get vulnerability data?

It retrieves data from MITRE’s CVE database.

Does CVE MCP Server require authentication?

The README does not mention any authentication mechanism.

Frequently asked questions

What tools does CVE MCP Server provide?

It provides one tool, `query_cve`, which takes a required `cve_id` parameter (e.g., 'CVE-2021-44228').

How do I install CVE MCP Server?

Install it via pip: `pip install cve-mcp-server`.

What transports does CVE MCP Server support?

It supports stdio (default) and SSE. For stdio, run `uvx cve-mcp-server`; for SSE, run `uvx cve-mcp-server sse`.

Where does CVE MCP Server get vulnerability data?

It retrieves data from MITRE’s CVE database.

Does CVE MCP Server require authentication?

The README does not mention any authentication mechanism.

Comments

Basic information

More Developer Tools MCP servers

Meticulous

MCP server and skills to connect to the Meticulous UI testing platform.

Skilder.ai

skilder.ai

Run skills and MCP tools like production software: versioned, composed into roles, distributed to every agent from one governed library.

discoverGPT

Joe Monastiero

discoverGPT is visualAI's unified MCP gateway for AI commerce, exposing 29 tools across four capabilities on one canonical product catalog: trimodal search (natural-language, precise-color, and image-similarity), AI cata

BetterBugs

The BetterBugs MCP (Model Context Protocol) enables you to load BetterBugs bug reports (via report links) directly to your preferred AI Agents and developer environments with MCP Client capabilities (such as Cursor, VS C

CircleCI MCP Server

CircleCI

Manage CI/CD pipelines, debug failed builds, and optimize test suites directly from your AI agents - no terminal required. The CircleCI MCP Server is a remote server hosted by CircleCI that connects AI tools and agents