AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompare
Home/
Security & Safety/
cve-mcp-server
cve-mcp-server logo

cve-mcp-server

Active·★ 1.6k·MIT·Updated 2026-10-01

CVE MCP Server is a Python MCP server that lets Claude act as a vulnerability analyst. Instead of checking NVD, EPSS, CISA KEV, GitHub, VirusTotal, Shodan and GreyNoise by hand, you ask a question such as "Should we patch CVE-2024-3400?" and the server queries the relevant sources in parallel and computes a composite risk score. The README counts 27 tools across 21 data sources.

Tools are grouped into core vulnerability intelligence (`lookup_cve`, `search_cves`, `get_epss_score`, `check_kev_status`, `get_cvss_details`, `bulk_cve_lookup` for up to 20 CVEs and more), exploit and attack intelligence (`search_exploits`, `check_poc_availability`, MITRE ATT&CK and CAPEC mapping), plus network and threat-intelligence lookups. Architecture is a stdio server with an async HTTP client, rate limiting and a SQLite cache with an audit log. Many tools work without API keys; keys for NVD, GitHub and others are optional but recommended.

The README states what it does not do: no active scanning, no write operations apart from URLScan submissions, and no CVSS v4.0 scoring (only v3.1 is calculated). It sends CVE IDs, IPs, hashes and domains to the respective external APIs, blocks private and reserved IP ranges before any lookup, and loads keys from environment variables only. Known limits include 2,000 results per NVD query, 50 GreyNoise community queries a week and 4 VirusTotal requests a minute on the free tier. Licence is MIT, last push 2026-10-01. This review is based on the README and repository data; we have not run it ourselves.

© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.

Guides

This write-up is based on the project's README and public repository data. We have not hand-tested the tool. Data as of 2026-10-22.

License
Apache-2.0
Latest release
v0.2.0 · 2026-06-22
Last commit
2026-10-01
Contributors
2
Forks
268
Open issues and PRs
14
First published
2026-04-14

Source: GitHub, npm and PyPI public APIs.

#cisa-kev#claude-ai#cve#cybersecurity#devsecops#epss#fastmcp#mcp
$ Install
$ git clone https://github.com/mukul975/cve-mcp-server.git && cd cve-mcp-server && python -m venv venv && source venv/bin/activate && pip install -e .
↗ Visit site★ GitHub
01

Features

01Integrates 27 MCP tools across 21 security data sources (NVD, EPSS, CISA KEV, Shodan, VirusTotal, etc.)
02Composite risk scoring engine (CVSS, EPSS, KEV, PoC) with prioritized recommendations
03Async SQLite cache and rotating audit log for performance and compliance
04Private IP blocking and API key protection for security
05Supports zero-key start with 8 tools working out of the box
02

Why choose it

+One question fans out to NVD, EPSS, CISA KEV, GitHub and more, then returns a composite risk score
+Read-only intelligence: no active scanning and no write operations except URLScan submissions
+Blocks private IP ranges, loads keys from environment variables, caches in local SQLite with an audit log
+MIT license; many tools need no API key
03

Trade-offs

!Lookups send CVE IDs, IPs, hashes and domains to third-party APIs, so avoid querying sensitive internal indicators
!Free tiers are tight: 4 VirusTotal requests a minute and 50 GreyNoise queries a week
!CVSS v4.0 scores are shown but not calculated, and new CVEs may lack EPSS for the first day
!The composite risk score is the project's own formula; treat it as a triage aid, not a verdict
04

Maintenance check

SlowingChecked: 2026-10-18
Last commit
2026-06-22
Commits, last 90 days
0
Releases, last 90 days
0
Latest release
v0.2.0 (2026-06-22)
Open issues
14
Recent issues with at least one comment
5/6
Commits per week, last 12 weeks
Commits per week, last 12 weeks: 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0

Oldest week on the left; the latest four weeks are orange. Source: GitHub commit activity.

05

Compatibility

Python
Python 3.10+
Verified via docs
macOS
macOS
Verified via docs
Linux
Linux
Verified via docs
Windows
Windows
Verified via docs
06

Quick start

1
$ git clone https://github.com/mukul975/cve-mcp-server.git
2
$ cd cve-mcp-server
3
$ python -m venv venv
4
$ source venv/bin/activate
5
$ pip install -e .
07

Use cases

↳Security analysts triaging and prioritizing CVEs for patching
↳DevSecOps teams scanning dependencies for known vulnerabilities
↳Threat intelligence investigations of suspicious IPs, hashes, and domains
08

Alternatives

⚡Top VS:
VScontrastapi★35→VSmcp-shodan★179→VSmcp-virustotal★152→

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Why choose it03Trade-offs04Maintenance check05Compatibility06Quick start

Status rule: archived on GitHub = Archived; last commit within 90 days = Active; 91 to 365 days = Slowing; older = Stale. All figures come from the GitHub API on the date shown.

Most discussed open issues

  • #1 [Feature]: add docker compose support2 comments · 2026-04-15
  • #18 pyproject.toml: missing upper bound for mcp — fresh installs fail on mcp 2.x (FastMCP renamed to MCPServer)1 comments · 2026-08-29
  • #3 [Feature]: Downloadable Skill for Coding Agents1 comments · 2026-05-01
  • #12 5 tool schema field name / value mismatches in README docs (with repro)0 comments · 2026-06-04

Issue titles are quoted from GitHub. Open the link to check whether a problem still applies to the version you use.

VS
McpVanguard
★13
→
contrastapi logo
contrastapi★ 35
Security intelligence API and MCP server for AI agents. 25 tools, 35+ endpoints: CVE/EPSS/KEV, domain recon, SSL, IP reputation, threat intel, email security, code scanning. Free, no signup.
VSCompare→
mcp-shodan logo
mcp-shodan★ 179
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.
VSCompare→
mcp-virustotal logo
mcp-virustotal★ 152
MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.
VSCompare→
McpVanguard logo
McpVanguard★ 13
An open-source security proxy and active firewall for the Model Context Protocol (MCP). It acts as a real-time 'Reflex System' between AI agents and their tools, protecting the host system from malicious intent, prompt injection, and data exfiltration.
VSCompare→
redamon logo
redamon★ 3.2k
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
VSCompare→
gopher-mcp logo
gopher-mcp★ 152
MCP C++ SDK - Model Context Protocol implementation in CPP with enterprise-grade security, visibility and connectivity.
VSCompare→
pfsense-mcp-server logo
pfsense-mcp-server★ 112
pfSense MCP Server enables security administrators to manage their pfSense firewalls using natural language through AI assistants like Claude Desktop. Simply ask "Show me blocked IPs" or "Run a PCI compliance check" instead of navigating complex interfaces. Supports REST/XML-RPC/SSH connections, and includes built-in complian
VSCompare→
peta-core logo
peta-core★ 59
Peta core: The Control Plane for MCP — secure vault, managed runtime, audit trail, and policy-based approvals.
VSCompare→
See all alternatives →
07
Use cases
08Alternatives
mukul975 /
cve-mcp-server
↗

MIT Python MCP server with 27 read-only tools over 21 security data sources for CVE triage, EPSS, CISA KEV and a composite risk score

1.6k268MIT
Last commit3w ago
StatusActive
CategorySecurity & Safety
Contributors2
Latest releasev0.2.0
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit