cve-mcp-server
installs/mo · pypistarsforks
How to install cve-mcp-server?
mukul975/cve-mcp-server
$git clone https://github.com/mukul975/cve-mcp-serverA production-grade Model Context Protocol (MCP) server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal, and GreyNoise, ask Claude one question and get correlated intelligence in secon
README.md
| 1 | # 🛡️ CVE MCP Server |
| 2 | |
| 3 |  |
| 4 | |
| 5 | **AI-powered security intelligence at your fingertips — 28 tools + a one-call `triage_cve` orchestrator, 24 data sources, one protocol.** |
| 6 | [](https://mahipal.engineer/survey?utm_source=github_badge&utm_medium=readme&utm_campaign=gars2026) |
| 7 | [](https://python.org) |
| 8 | [](LICENSE) |
| 9 | [](https://modelcontextprotocol.io) |
| 10 | [](https://github.com/mukul975/cve-mcp-server) |
| 11 | [](https://gofastmcp.com) |
| 12 | |
| 13 | A production-grade **Model Context Protocol (MCP) server** that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal, and GreyNoise, ask Claude one question and get correlated intelligence in seconds. Built with Python, FastMCP, httpx, aiosqlite, Pydantic v2, and defusedxml. |
| 14 | |
| 15 | **The problem:** Triaging a single CVE means querying NVD for CVSS scores, EPSS for exploitation probability, CISA KEV for active exploitation status, GitHub for patches, and VirusTotal for malware associations — then mentally correlating everything. For 50 CVEs, that's an entire day lost. |
| 16 | |
| 17 | **The solution:** CVE MCP Server gives Claude direct access to 28 security tools across 24 APIs — fronted by the **`triage_cve`** one-call orchestrator. Ask "Should we patch CVE-2024-3400?" and Claude fans out to every relevant source in parallel, calculates a composite risk score (with a CISA KEV hard override), and delivers a prioritized recommendation with evidence. |
| 18 | |
| 19 | --- |
| 20 | |
| 21 | ## 🌍 GARS-2026 — Global Agentic AI Readiness Survey |
| 22 | |
| 23 | I'm running a global academic study measuring how ready security professionals, |
| 24 | developers, and enterprise teams actually are for agentic AI — MCP servers, |
| 25 | tool calling, governance, and human-in-the-loop workflows. |
| 26 | |
| 27 | **If you use this repo, your response would be a genuinely valuable data point.** |
| 28 | |
| 29 | 📋 **Take the survey (10 min):** |
| 30 | [Survey](https://mahipal.engineer/survey?utm_source=github_repo&utm_medium=readme&utm_campaign=gars2026) |
| 31 | |
| 32 | - 60 questions · Anonymous · Supervised by SRH Berlin |
| 33 | - You get **50 Casky Tokens** for early access to [casky.ai](https://casky.ai) |
| 34 | - Results published open access under CC-BY 4.0 |
| 35 | |
| 36 | --- |
| 37 | |
| 38 | ## 📑 Table of contents |
| 39 | |
| 40 | - [Architecture](#-architecture) |
| 41 | - [Tool catalog](#-tool-catalog-28-tools) |
| 42 | - [Installation](#-installation) |
| 43 | - [API keys setup](#-api-keys-setup) |
| 44 | - [Configuration](#%EF%B8%8F-configuration) |
| 45 | - [Quick start](#-quick-start) |
| 46 | - [Usage examples](#-usage-examples) |
| 47 | - [Risk score explained](#-risk-score-explained) |
| 48 | - [Data sources](#-data-sources) |
| 49 | - [Running tests](#-running-tests) |
| 50 | - [Architecture deep dive](#-architecture-deep-dive) |
| 51 | - [Security and privacy](#-security-and-privacy) |
| 52 | - [Troubleshooting](#-troubleshooting) |
| 53 | - [Roadmap and known limitations](#-roadmap-and-known-limitations) |
| 54 | - [Contributing](#-contributing) |
| 55 | - [License](#-license) |
| 56 | |
| 57 | --- |
| 58 | |
| 59 | ## 🏗️ Architecture |
| 60 | |
| 61 | ``` |
| 62 | ┌─────────────────────────────────────────────────────────────────────┐ |
| 63 | │ Claude Desktop / Claude Code │ |
| 64 | │ (MCP Client via stdio) │ |
| 65 | └──────────────────────────────┬──────────────────────────────────────┘ |
| 66 | │ Model Context Protocol (stdio) |
| 67 | ▼ |
| 68 | ┌─────────────────────────────────────────────────────────────────────┐ |
| 69 | │ CVE MCP Server (Python) │ |
| 70 | │ ┌─────────────┐ ┌─── |
People who liked this also viewed
6 picksType
- mcp-scannerScan MCP servers for potential threats & security findings.MCP ServersJul 2026
- hol-guardOpen-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.MCP ServersJul 2026
- agent-scanSecurity scanner for AI agents, MCP servers and agent skills.MCP ServersJul 2026
- falcon-mcpConnect AI agents to CrowdStrike Falcon for automated security analysis and threat huntingMCP ServersJul 2026
- python🔐 Plug-and-play auth for Python MCP servers.MCP ServersAug 2025
- auth0-mcp-serverConnect LLMs and AI agents to Auth0 Management APIs via an MCP server. Use natural-language commands to create apps, deploy Actions, and query logs—runs locally and supports interactive tenant authentication for secure Auth0 administration from AI tools/CLIs.MCP ServersJul 2026
