How do I connect Nist Nvd MCP Server to Claude?

The listing records `docker run --rm -e NVD_API_KEY=your-key -p 3010:3010 nist-nvd-mcp-server` as its setup step. Run it, then follow the repository's instructions for the client configuration; the listing names Claude Desktop, Cursor, VS Code as compatible clients.

Is Nist Nvd MCP Server free?

The listed licence is Apache-2.0. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.

What can Nist Nvd MCP Server do?

Nist Nvd MCP Server documents 5 tools to the agent, including nvd_audit_cpe, nvd_get_cve, nvd_get_cve_history. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.

Nist Nvd MCP Server

Unclaimed

by cyanheads

Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.

Install

$docker run --rm -e NVD_API_KEY=your-key -p 3010:3010 nist-nvd-mcp-server

Set up this server

Compare servers My Stack

This server needs project-specific setup. Follow the project instructions; no reusable public launch command is available yet.

Project instructions

buncisa-kevcpecvecvssmcpmcp-servermodel-context-protocolnistnvdsecuritytypescriptvulnerability

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Security profile

Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works

Documented tools (5)

From project documentation. A server handshake does not verify each tool’s description or behavior.

nvd_audit_cpe

Find all CVEs affecting a specific product version by CPE name or virtual match string.

nvd_get_cve

Fetch one or more CVEs by ID — full CVSS scores, CWE, CPE configs, KEV fields, and references.

nvd_get_cve_history

Retrieve the change history for a CVE — score revisions, status transitions, and reference additions.

nvd_search_cpes

Search the NVD CPE dictionary by product keyword or partial match string.

nvd_search_cves

Search CVEs by keyword, severity, CWE, date range, or CISA KEV status.

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about Nist Nvd MCP Server

How do I connect Nist Nvd MCP Server to Claude?: The listing records `docker run --rm -e NVD_API_KEY=your-key -p 3010:3010 nist-nvd-mcp-server` as its setup step. Run it, then follow the repository's instructions for the client configuration; the listing names Claude Desktop, Cursor, VS Code as compatible clients.
Is Nist Nvd MCP Server free?: The listed licence is Apache-2.0. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can Nist Nvd MCP Server do?: Nist Nvd MCP Server documents 5 tools to the agent, including nvd_audit_cpe, nvd_get_cve, nvd_get_cve_history. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.