How to Use the NIST NVD MCP in Vercel AI SDK

Q: How can I use the Vercel AI SDK to search the NIST NVD for specific keywords?

Your agent can call the searchcvebykeyword tool. The Vercel AI SDK will stream the results directly, letting you populate a UI list with matching CVEs as they're found.

Q: Can my Vercel AI SDK app filter NIST NVD results by severity?

Yes. The searchcvebyseverity tool lets your agent request only 'CRITICAL' or 'HIGH' severity CVEs. This is perfect for building focused security alert dashboards.

Q: How do I find all vulnerabilities for a product using the Vercel AI SDK and NIST NVD?

First, use searchcpebykeyword to find the product's CPE string. Then, pass that string to searchcvebycpe to get a complete list of associated vulnerabilities from the NIST NVD.

Stream live vulnerability data from NIST NVD directly into your Next.js UI components with the Vercel AI SDK.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect NIST NVD MCP to Vercel AI SDK

Create your Vinkius account to connect NIST NVD to Vercel AI SDK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup NIST NVD with Vercel AI SDK

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Stream CVE Details into Your UI

Let your users query for specific security flaws and see the results appear in real-time. With the Vercel AI SDK, tool calls to `get_cve_by_id` and `search_cve_by_keyword` don't just return data—they stream it. You can build components that populate with CVSS scores and summaries as the AI fetches them. No more loading spinners. Your interface feels alive because the data flows from the NIST NVD, through the MCP Server, and into your React components without waiting for the entire payload. It's a better user experience for security dashboards.

Map Products to Vulnerabilities

Find out exactly what your software is exposed to. Use `search_cpe_by_keyword` to find the official product identifier for your dependencies, then feed that into `search_cve_by_cpe`. This gives you a direct list of all known vulnerabilities for that specific product. Because the Vercel AI SDK handles streaming, you can show users the product match first, then progressively load the associated CVEs. This makes interactive vulnerability scanning feel instant.

Track Vulnerability History in Real-Time

Understand how a threat has evolved. The `get_cve_change_history` tool lets you pull the full modification history for any CVE. Your AI client can use this to explain why a vulnerability's score changed or when new information was added. This isn't just a data dump. You can build a visual timeline in your Svelte or Vue app, showing each change from the NIST NVD as a separate event. It gives your users context, not just a static report.

Setup guide

Set up NIST NVD MCP in Vercel AI SDK

Prerequisites

Node.js 18+ and a TypeScript project
ai + @modelcontextprotocol/sdk packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies

Run npm install ai @modelcontextprotocol/sdk plus your preferred model provider (e.g. @ai-sdk/openai).
2

Create the Streamable HTTP transport

Use StreamableHTTPClientTransport with your Vinkius endpoint URL. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Discover and use tools

Call mcpClient.tools() to auto-discover all NIST NVD tools. Pass them directly to generateText() or streamText() — no manual schema definitions needed.
4

Works with any model provider

Swap openai("gpt-4o") for any AI SDK provider — Anthropic, Google, Mistral. The MCP tools work identically across all supported models.

index.ts

import { experimental_createMCPClient as createMCPClient } from "ai";
import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp";
import { generateText } from "ai";
import { openai } from "@ai-sdk/openai";

const transport = new StreamableHTTPClientTransport(
  new URL("https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp")
);

const mcpClient = await createMCPClient({ transport });
const tools = await mcpClient.tools();

const { text } = await generateText({
  model: openai("gpt-4o"),
  tools,
  prompt: "List recent NIST NVD transactions",
});

console.log(text);
await mcpClient.close();

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by NIST NVD. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect NIST NVD now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about NIST NVD MCP in Vercel AI SDK

Your agent can call the `search_cve_by_keyword` tool. The Vercel AI SDK will stream the results directly, letting you populate a UI list with matching CVEs as they're found.

Yes. The `search_cve_by_severity` tool lets your agent request only 'CRITICAL' or 'HIGH' severity CVEs. This is perfect for building focused security alert dashboards.

Absolutely. The server is a standard HTTP endpoint. You can call it from your Edge Functions using the Vercel AI SDK's MCP client for low-latency vulnerability checks.

First, use `search_cpe_by_keyword` to find the product's CPE string. Then, pass that string to `search_cve_by_cpe` to get a complete list of associated vulnerabilities from the NIST NVD.

The server only handles public vulnerability data like CVE details, CWE weakness types, and CPE product identifiers. It never sees your proprietary code or user information. All connections are ephemeral and secured.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript