Skip to contentnist-nvd-mcp-server MCP Server | MCPpediaNnist-nvd-mcp-server MCP Server
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
37LimitedInstall
~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"cyanheads-nist-nvd-mcp-server": {
"command": "npx",
"args": [
"-y",
"@cyanheads/nist-nvd-mcp-server@0.3.2"
],
"env": {
"NVD_API_KEY": "",
"NVD_REQUEST_TIMEOUT_MS": "10000",
"MCP_LOG_LEVEL": "info"
}
}
}
}
Related servers
FMCP server for Firecrawl — web search, scraping, and biomedical/arXiv paper search.
Environment
| Name | Required | Notes |
|---|
| NVD_API_KEY | No | NVD API key. Without it, rate limit is 5 req/30s; with it, 50 req/30s. Get one free at nvd.nist.gov/developers/request-an-api-key. |
| NVD_REQUEST_TIMEOUT_MS | No | Per-request timeout in milliseconds. Raise to 60000 when using nvd_get_cve_history without an API key. |
| MCP_LOG_LEVEL | No | Sets the minimum log level for output (e.g., 'debug', 'info', 'warn'). |
| MCP_TRANSPORT_TYPE | No | Selects the HTTP transport. |
| NVD_API_KEY | No | NVD API key. Without it, rate limit is 5 req/30s; with it, 50 req/30s. Get one free at nvd.nist.gov/developers/request-an-api-key. |
| NVD_REQUEST_TIMEOUT_MS | No | Per-request timeout in milliseconds. Raise to 60000 when using nvd_get_cve_history without an API key. |
| MCP_HTTP_HOST | No | The hostname for the HTTP server. |
| MCP_HTTP_PORT | No | The port to run the HTTP server on. |
| MCP_HTTP_ENDPOINT_PATH | No | The endpoint path for the MCP server. |
| MCP_AUTH_MODE | No | Authentication mode to use: 'none', 'jwt', or 'oauth'. |
| MCP_LOG_LEVEL | No | Sets the minimum log level for output (e.g., 'debug', 'info', 'warn'). |
Tools show up when the registry metadata or the repository README lists them. GitHub enrichment fills this in when a token is configured.
About
Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.
FAQ
- What is nist-nvd-mcp-server?
- Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
- How do I install nist-nvd-mcp-server?
- Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.
- Is nist-nvd-mcp-server official?
- No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.
- How is the trust score calculated?
- This listing scores 37 (Limited). The formula is published on the methodology page.
Reviews
0 published · no average
Sign in to review this server.
Good
Search, read, annotate, and add to your Zotero research library, local or web.
HLocal-first agentic RAG with citations - hybrid search, reranking, multimodal document retrieval
MLocal-first, cloud-friendly memory — 100+ tools, 99.2% LongMemEval-S retrieval@8, hybrid search.
DCrawl documentation sites into local corpora agents can search, read, and diff fully offline.
OSecure MCP access to Onyx search, chat, projects, and administration.