Cve MCP Server
UnclaimedProduction-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
Install
claude mcp add cve-mcp -- python -m cve_mcp.serverUnclaimed listing
Is this your MCP server?
This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.
Claim this serverTools (28)
bulk_cve_lookup
Batch-fetch details for up to 20 CVEs in a single call with parallel enrichment
calculate_risk_score
Compute composite 0–100 risk score using CVSS, EPSS, KEV status, and PoC availability
check_ip_noise
Query GreyNoise for IP scan/attack activity, classification, and associated CVEs
check_kev_status
Check whether a CVE appears in CISA's Known Exploited Vulnerabilities catalog
check_poc_availability
Determine if known proof-of-concept code exists for a CVE across multiple sources
check_ransomware
Look up ransomware payment addresses and transaction data from Ransomwhere
generate_risk_report
Generate a formatted executive security report for one or more CVEs with recommendations
get_attack_patterns
Retrieve CAPEC attack pattern details associated with a CWE or CVE
get_cve_references
Extract and categorize all reference links for a CVE (patches, advisories, exploits)
get_cvss_details
Parse and explain a CVSS v3.1 vector string with per-metric breakdown
get_cwe_info
Look up Common Weakness Enumeration details by CWE ID from embedded database
get_epss_score
Get EPSS exploitation probability (0–1) and percentile for one or more CVEs
get_mitre_techniques
Map a CVE or CWE to relevant MITRE ATT&CK techniques, tactics, and mitigations
get_trending_cves
Retrieve trending CVEs based on high EPSS scores and recent KEV additions
lookup_cve
Fetch detailed CVE record from NVD including CVSS scores, CWEs, affected products, references, and timeline
lookup_ip_reputation
Check IP address abuse history and confidence score via AbuseIPDB
passive_dns_lookup
Retrieve historical DNS resolution data for a domain from CIRCL Passive DNS
prioritize_cves
Rank a list of CVEs by composite risk score for triage prioritization
scan_dependencies
Scan package names and versions against OSV.dev for known vulnerabilities
scan_github_advisories
Search GitHub Security Advisories by ecosystem, package, or severity
search_cves
Search NVD for CVEs by keyword, product name, severity, or date range
search_exploits
Search GitHub for public proof-of-concept exploits and exploit code repositories
search_iocs
Query ThreatFox for Indicators of Compromise linked to malware families
search_malware
Search MalwareBazaar for malware samples by hash, tag, or signature
shodan_host_lookup
Get open ports, services, banners, and vulnerabilities for an IP via Shodan
triage_cve
One-call triage that fans out NVD + EPSS + CISA KEV (+ public PoC for depth != "quick") concurrently, computes the composite risk score with a KEV hard override, falls back to VulnCheck NVD++ when NIST NVD is throttled, and on depth="deep" emits the SSVC v2 gated decision
urlscan_check
Submit a URL for scanning or retrieve previous scan results from URLScan.io
virustotal_lookup
Analyze file hashes, URLs, domains, or IPs against 70+ antivirus engines