Nist Nvd MCP Server

by cyanheads Your server? Claim it

answering

Nist Nvd MCP Server is answering right now. Last checked 11 min ago. 340 installs a week from npm. It exposes 5 tools. Last commit 26 Oct 2026.

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

Installs per day peak 245 · avg 55 · -52% w/w

a month agotoday

Uptime history 49 days of history · worst day 95%

49 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

578 ms

Response time

average over 24h

340

Installs / week

npm and PyPI

What changed 10

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 9 October 2026. No other catalogue keeps this.

26 Oct 5 tools changed the parameters they ask for nvd_audit_cpe, nvd_get_cve, nvd_get_cve_history and 2 more

26 Oct 3 tool descriptions were rewritten nvd_audit_cpe, nvd_get_cve, nvd_search_cves

26 Oct a tool changed version

9 Oct a tool changed version

Nothing serious here today

Today is the operative word: we check Nist Nvd MCP Server every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add nist-nvd-mcp-server --transport http https://nist-nvd.caseyjhand.com/mcp

Settings → Connectors → Add custom connector, then paste this address

https://nist-nvd.caseyjhand.com/mcp

~/.codex/config.toml

[mcp_servers.nist-nvd-mcp-server]
url = "https://nist-nvd.caseyjhand.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "nist-nvd-mcp-server": {
      "url": "https://nist-nvd.caseyjhand.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "nist-nvd-mcp-server": {
      "type": "http",
      "url": "https://nist-nvd.caseyjhand.com/mcp"
    }
  }
}

Available tools 5

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

nvd

nvd_audit_cpe

Find all CVEs affecting a specific product and version using CPE (Common Platform Enumeration). Requires either an exact CPE name (cpeName) or a partial match string (virtualMatchString) with optional version range bounds. With cpeName, NVD scopes results to configurations where the product is directly vulnerable, not merely referenced as a dependency. Use nvd_search_cpes first to resolve the correct CPE string for a product. Returns full CVE records including current SSVC assessments.

nvd_get_cve

Fetch one or more CVEs by ID from the NIST National Vulnerability Database. Returns CVSS scores across all available versions (v2.0, v3.0, v3.1, v4.0), CWE weakness classifications, affected CPE configurations, CISA KEV fields, current SSVC assessments, and references. Up to 100 CVE IDs per call. For bulk lookups of more than 10 IDs, use brief: true — full records for 100 CVEs can exceed 1MB and exhaust context budgets.

nvd_get_cve_history

Retrieve the change history for a single CVE — CVSS score revisions, reference additions, status transitions (e.g., "Received" → "Analyzed"), and CPE configuration updates. Use when tracking a CVE's escalation or investigating when a score changed. Events are returned newest-first by default; pass order="oldest" for the CVE's earliest events. For the current record, call nvd_get_cve instead. The NVD history endpoint is significantly slower than other NVD endpoints, especially without an API key — set NVD_API_KEY for reliable operation.

nvd_search_cpes

Search the NVD CPE (Common Platform Enumeration) dictionary by product keyword or partial match string. Returns CPE names, human-readable titles, and deprecation status. Use before nvd_audit_cpe to resolve the correct CPE name for a product — CPE strings are precise identifiers (e.g., cpe:2.3:a:apache:http_server:2.4.51:*:*:*:*:*:*:*) and must match exactly to audit the right product.

nvd_search_cves

Search CVEs by keyword, severity, CWE, date range, or CISA KEV status. The primary discovery tool for vulnerability surveillance and triage workflows. pubDays and lastModDays expand to date pairs; values over 120 days are clamped to the NVD maximum and reported in the response enrichment. Returns brief summaries — call nvd_get_cve for full detail on specific IDs. At least one filter is recommended; omitting all filters returns CVEs in default NVD index order (oldest first by CVE ID). Blank string filters are omitted with a notice; nonblank strings are trimmed.

Endpoints

URL	Transport	State	Latency	Checked
https://nist-nvd.caseyjhand.com/mcp	streamable-http	answering	585 ms	11 min ago

Alternatives to Nist Nvd MCP Server

same job, measured the same way

CVE Vulnerability Lookup — CVSS Scores & NVD Status

by kriton-dev

Look up NVD CVE dates, status, numeric CVSS scores and severity

answering

Clinicaltrials

by pipeworx-io

Search and analyze ClinicalTrials.gov: trials by keyword/condition/drug/status/phase, one study's…

350 installs/wk 58 tools answering

Emoji MCP

by mrfentmen

Search emoji by name or keyword locally. No network and no key.

54 installs/wk local only

Luma Events

by alx1p

Discover events from Luma — search by category, city, distance, and keywords with calendar export

100 installs/wk local only

Craigslist Scraper & Tracker (cars, housing)

by akhilrajesh213

Craigslist listings for AI agents: search by keyword, city, state and category; cars, rentals.

answering

SEO & GEO by Alvin's Club

by alvinsclub-studio

SEO audit and AI visibility check for your website, plus Search Console keyword opportunities.

answering

American Samoa Code

by pipeworx-io

American Samoa Code Annotated (A.S.C.A.) — section lookup by citation and topic/keyword search…

106 installs/wk 47 tools answering

Cyberark MCP

by mrfentmen

Password breach checks and identity security audits - no API key.

110 installs/wk local only

Nist Nvd MCP Server — questions

Answers built from our own checks of this server.

What can Nist Nvd MCP Server do?

It exposes 5 tools, read directly from the server on our last check. Among them: nvd_audit_cpe, nvd_get_cve, nvd_get_cve_history, nvd_search_cpes, nvd_search_cves. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Nist Nvd MCP Server working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 578 ms. The bar chart above shows every period we have measured.

How do I connect Nist Nvd MCP Server?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Nist Nvd MCP Server need an API key?

No. Nist Nvd MCP Server completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 5 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Nist Nvd MCP Server?

It answers our handshake in 578 ms on average, which is faster than 19% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.

How many people use Nist Nvd MCP Server?

The npm package @cyanheads/nist-nvd-mcp-server was installed 340 times in the last week. Week over week that is -52%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Nist Nvd MCP Server open source?

The code is open source: it is published under the Apache-2.0 licence, written in TypeScript, 2 stars on GitHub and 2 open issues. The licence covers the code in the repository, not the hosted service at nist-nvd.caseyjhand.com, which runs on its operator's own terms.