How to Use the NIST NVD MCP in Google ADK

Q: How do I add the NIST NVD MCP Server to my Google ADK agent?

Initialize McpToolset using StreamableHttpServerParameters with your Vinkius URL. Pass this toolset into your LlmAgent constructor to expose the vulnerability search tools to Gemini.

Q: How do I limit the NIST NVD tools exposed to Google ADK?

Use the optional toolnames filter when creating your McpToolset. This restricts your Gemini agent to specific tools like getcvebyid, preventing it from running expensive keyword searches.

Inject NIST NVD vulnerability data directly into your Google ADK pipelines to automate enterprise-wide security triage.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect NIST NVD MCP to Google ADK

Create your Vinkius account to connect NIST NVD to Google ADK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup NIST NVD with Google ADK

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Run long-context vulnerability analysis in Google ADK

The `search_cve_by_keyword` tool lets your Google ADK agent query the entire NVD catalog using natural language. Gemini models ingest thousands of CVE summaries at once, using their massive one-million-token context window to find hidden patterns. You feed raw security logs from BigQuery directly into the agent. The agent executes `search_cve_by_cwe` to correlate your database records with known weakness types, producing an instant risk report.

Audit cloud infrastructure using CPE matches

The `list_cpe_matches` tool extracts formal platform identifiers so your Google ADK agent can verify your Vertex AI deployments. The agent compares your active container images against the official NVD dictionary to detect unpatched software. This integration runs on Google Cloud infrastructure using standard HTTP transports. Security teams call `get_cpe_by_id` to verify specific platform configurations, ensuring your runtime environments match compliance baselines.

Track historical CVE changes within Google ADK

The `get_cve_change_history` tool exposes the complete modification timeline of any vulnerability to your Google ADK agent. This prevents your automated workflows from relying on outdated CVSS scores or stale mitigation advice. You restrict the agent's scope by passing a filtered list of tools to `McpToolset`. This ensures the agent only calls critical endpoints like `get_cve_by_id` during automated cloud infrastructure audits.

Setup guide

Set up NIST NVD MCP in Google ADK

Prerequisites

Python 3.10+ installed
google-adk package (pip install google-adk)
Active Vinkius subscription with a valid endpoint token

1

Install Google ADK

Run pip install google-adk to install the Agent Development Kit. MCP support is included via the McpToolset class.
2

Connect via SSE transport

Use McpToolset.from_server() with SseServerParams pointing to your Vinkius endpoint. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Create an LlmAgent

Pass the returned mcp_tools list directly to LlmAgent(tools=mcp_tools). The ADK maps each MCP tool to a native Gemini function call — no manual schema definitions required.
4

Run with any Gemini model

The agent works with any Gemini model (gemini-2.0-flash, gemini-2.5-pro, etc.). Copy the full example on the right to get started with NIST NVD tools in your ADK agent.

agent.py

from google.adk.agents import LlmAgent
from google.adk.tools.mcp_tool.mcp_toolset import McpToolset
from google.adk.tools.mcp_tool.mcp_session_manager import SseServerParams

# Connect to the MCP via SSE
mcp_tools, exit_stack = await McpToolset.from_server(
    connection_params=SseServerParams(
        url="https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    )
)

# Create your agent with auto-discovered tools
agent = LlmAgent(
    name="NIST NVD_agent",
    model="gemini-2.0-flash",
    instruction="You have access to NIST NVD tools via MCP.",
    tools=mcp_tools,
)

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by NIST NVD. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect NIST NVD now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about NIST NVD MCP in Google ADK

Initialize `McpToolset` using `StreamableHttpServerParameters` with your Vinkius URL. Pass this toolset into your `LlmAgent` constructor to expose the vulnerability search tools to Gemini.

Yes, your agent can read server logs from BigQuery and immediately run `search_cve_by_cpe` to check for active threats. Gemini processes both data sources simultaneously within its long-context window.

Use the optional `tool_names` filter when creating your `McpToolset`. This restricts your Gemini agent to specific tools like `get_cve_by_id`, preventing it from running expensive keyword searches.

Yes, the toolset supports both Stdio and HTTP transports. Your enterprise agent communicates with the Vinkius sandbox over secure, low-latency channels to fetch vulnerability data.

Your private system configurations never leave your Google Cloud VPC during analysis. The MCP server only receives the anonymized queries generated by `search_cpe_by_keyword`, and Vinkius executes these requests in an isolated, ephemeral runtime environment.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript