NIST NVD Connector for AI agents.
10 live capabilities
Pull authoritative CVE and CPE data for security research.
Waiting for input…
Why people use NIST NVD
NIST NVD for Faster Vulnerability Research
With this Connector, your agent does the hunting for you. You just describe the product or the severity level you're worried about, and the agent pulls the data directly from the source. You get a clean list of risks without ever opening a browser.
What Vinkius changes
You get a direct line to authoritative vulnerability data without the manual searching.
Use it from Claude, ChatGPT, Cursor or another AI client you already have.
One account · 5,900+ Connectors
- Real-world use case 01
Identifying risks for a specific router
A user asks the agent to find CVEs for a specific CPE string.
- Real-world use case 02
Finding high-severity flaws in a recent update
A developer asks for all 'Critical' vulnerabilities published in the last month.
- Real-world use case 03
Researching specific weakness types
A researcher wants to see all flaws related to Cross-Site Scripting.
Complete set · 10capabilities
The complete NIST NVD capability set.
These are the exact actions your AI can choose when you ask it to work with NIST NVD.
01—04
4 capabilities in this set.
Part of 10 available through NIST NVD.
- 01 Capability
Search cpe by keyword
Find specific software or hardware products using a simple keyword search in the dictionary.
- 02 Capability
Search cve by cpe
Identify all vulnerabilities associated with a specific product or version string.
- 03 Capability
Search cve by cwe
Find flaws based on the specific type of weakness like SQL injection or buffer overflows.
- 04 Capability
Search cve by date
Filter the database for vulnerabilities published or modified during a specific timeframe.
05—07
3 capabilities in this set.
Part of 10 available through NIST NVD.
- 05 Capability
Search cve by keyword
Search for CVEs using general terms or specific vulnerability descriptions.
- 06 Capability
Search cve by severity
Filter results to only show vulnerabilities with specific CVSS severity levels.
- 07 Capability
Get cpe by id
Retrieve the specific product entry from the CPE dictionary using its unique UUID.
08—10
3 capabilities in this set.
Part of 10 available through NIST NVD.
- 08 Capability
Get cve change history
See the timeline of updates and modifications for a specific vulnerability record.
- 09 Capability
List cpe matches
Get a list of valid CPE strings that match your specific product search terms.
- 10 Capability
Get cve by id
Pull the full details for a specific vulnerability record using its CVE identifier.
Set up in minutes
One URL. Then ask NIST NVD to work.
Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use NIST NVD from the conversation.
Choose your client
Live previewAdvanced clients IDE · CLI
Claude · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_di1FzaR2p54s3bOkX9Kq05itOme6MTw3QnOWExLr/mcp - Step 01
Open Connectors
In Claude Web or Claude Desktop, open Settings and choose Connectors.
- Step 02
Add the URL
Choose Add custom connector, name it NIST NVD, and paste the URL above.
- Step 03
Turn it on in chat
Select +, open Connectors, and enable NIST NVD for the conversation.
ChatGPT · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_di1FzaR2p54s3bOkX9Kq05itOme6MTw3QnOWExLr/mcp - Step 01
Open MCP settings
On desktop, open Settings and MCP servers. On web, open your workspace app or connector settings.
- Step 02
Add the URL
Choose Add server with Streamable HTTP, or create a custom MCP app, then paste the NIST NVD URL.
- Step 03
Save and start
Save the connection and enable NIST NVD in your conversation. Desktop may ask you to restart once.
Cursor · IDE configuration
Advanced setup
{
"mcpServers": {
"nist-nvd": {
"url": "https://edge.vinkius.com/vk_preview_di1FzaR2p54s3bOkX9Kq05itOme6MTw3QnOWExLr/mcp"
}
}
}- Step 01
Open MCP Settings
Press Cmd+Shift+P (macOS) or Ctrl+Shift+P (Windows/Linux) → search "MCP Settings"
- Step 02
Add the server config
Paste the JSON configuration above into the mcp.json file that opens
- Step 03
Save the file
Cursor will automatically detect the new Connector
- Step 04
Start using NIST NVD
Open Agent mode in chat and ask: "Using NIST NVD, help me...". 10 tools available
VS Code Copilot · IDE configuration
Advanced setup
{
"mcpServers": {
"nist-nvd": {
"url": "https://edge.vinkius.com/vk_preview_di1FzaR2p54s3bOkX9Kq05itOme6MTw3QnOWExLr/mcp"
}
}
}- Step 01
Create MCP config
Create a .vscode/mcp.json file in your project root
- Step 02
Add the server config
Paste the JSON configuration above
- Step 03
Enable Agent mode
Open GitHub Copilot Chat and switch to Agent mode using the dropdown
- Step 04
Start using NIST NVD
Ask Copilot: "Using NIST NVD, help me...". 10 tools available
Windsurf · IDE configuration
Advanced setup
{
"mcpServers": {
"nist-nvd": {
"url": "https://edge.vinkius.com/vk_preview_di1FzaR2p54s3bOkX9Kq05itOme6MTw3QnOWExLr/mcp"
}
}
}- Step 01
Open MCP Settings
Go to Settings → MCP Configuration or press Cmd+Shift+P and search "MCP"
- Step 02
Add the server
Paste the JSON configuration above into mcp_config.json
- Step 03
Save and reload
Windsurf will detect the new server automatically
- Step 04
Start using NIST NVD
Open Cascade and ask: "Using NIST NVD, help me...". 10 tools available
Cline · IDE configuration
Advanced setup
{
"mcpServers": {
"nist-nvd": {
"url": "https://edge.vinkius.com/vk_preview_di1FzaR2p54s3bOkX9Kq05itOme6MTw3QnOWExLr/mcp"
}
}
}- Step 01
Open Cline MCP Settings
Click the Connectors icon in the Cline sidebar panel
- Step 02
Add remote server
Click "Add Connector" and paste the configuration above
- Step 03
Enable the server
Toggle the server switch to ON
- Step 04
Start using NIST NVD
Ask Cline: "Using NIST NVD, help me...". 10 tools available
Claude Code · Terminal command
Advanced setup
claude mcp add nist-nvd --transport http "https://edge.vinkius.com/vk_preview_di1FzaR2p54s3bOkX9Kq05itOme6MTw3QnOWExLr/mcp"- Step 01
Install Claude Code
Run npm install -g @anthropic-ai/claude-code if not already installed
- Step 02
Add the Connector
Run the command above in your terminal
- Step 03
Verify the connection
Run claude mcp to list connected servers, or type /mcp inside a session
- Step 04
Start using NIST NVD
Ask Claude: "Using NIST NVD, show me...". 10 tools are ready
Where the request belongs
Work NIST NVD can move forward.
This is for the security professional who needs to move faster than a browser tab allows. It's for people who handle high-stakes risk assessments where accuracy and speed are non-negotiable.
Security Researcher
Investigating new CVEs to see how they affect specific software stacks during a threat hunt.
DevOps Engineer
Checking if a new library update introduces known critical vulnerabilities before it hits production.
Compliance Officer
Gathering evidence of vulnerability management and CVSS scores for security audits and reporting.
Build the capability set
Add more capabilities.
Each Connector adds new actions and data without changing how you work.
Browse ConnectorsUpGuard
Monitor your attack surface and assess vendor security risks with continuous scanning that identifies vulnerabilities before attackers do.
Aikido Security
Query security vulnerabilities via Aikido. list open issues, check repositories, monitor cloud assets, and track compliance directly from any AI agent.
Tenable
Manage Tenable Vulnerability Management scans, inspect cloud assets, and triage CVEs natively via your AI agent.
Contrast Security
Equip your AI with Contrast Security AppSec data to monitor applications and hunt critical vulnerabilities directly via chat.
Black Duck (Synopsys)
Secure your open source supply chain via Black Duck. list projects, versions, and vulnerabilities directly from any AI agent.
Beagle Security
Scan your web applications for vulnerabilities, generate penetration test reports, and strengthen your security posture proactively.
Bring your own AI
Change the model, client or framework. Keep NIST NVD connected.
-
Claude -
ChatGPT -
Gemini -
Cursor -
VS Code -
Windsurf -
ZCode -
Cline -
Zed -
Continue -
Kiro -
Roo Code -
Zencoder -
Goose -
Void -
Augment Code -
Amp -
Qodo -
Tabnine -
Pieces -
Sourcegraph Cody -
JetBrains -
Warp -
Amazon Q -
Antigravity -
BoltAI -
Raycast -
Jan -
LM Studio -
AnythingLLM -
Open WebUI -
Msty -
Cherry Studio -
LibreChat -
TypingMind -
Chorus -
5ire -
n8n -
LangChain -
LlamaIndex -
CrewAI -
Vercel AI SDK
Before you connect
Questions about NIST NVD.
The practical details behind the request, access and result.
Can the NIST NVD MCP help me identify which products are at risk?
Yes, it allows your agent to search for specific hardware and software products using keywords or official identifiers to see exactly what vulnerabilities apply to them.
How does the NIST NVD MCP handle different security severity levels?
You can ask your agent to filter results by CVSS scores, letting you focus only on the most critical threats that need immediate attention.
Can I use the NIST NVD MCP to track changes to a specific vulnerability?
Yes, the Connector can pull the full change history for a CVE, showing you how the database record has been updated over time.
Is the NIST NVD MCP good for security audits?
It's excellent for audits because it pulls authoritative data directly from the National Vulnerability Database, ensuring your reports are based on official records.
Can the NIST NVD MCP search for vulnerabilities by weakness type?
Yes, you can search by CWE (Common Weakness Enumeration) to find all vulnerabilities related to specific issues like buffer overflows or cross-site scripting.
Does the NIST NVD MCP require an API key?
While it works without one, providing your NIST NVD API key will give your agent higher rate limits for more frequent searches.
Is an API Key mandatory?
No. The NVD API allows public access without a key. However, using a key increases your rate limit significantly (up to 50 requests per 30 seconds).
What is a CPE string?
CPE (Common Platform Enumeration) is a structured naming scheme for information technology systems, software, and packages (e.g., cpe:2.3:a:microsoft:exchange_server:2019).
How far back can I search for vulnerabilities?
The NVD contains vulnerabilities dating back to the late 1990s. You can search the entire database by ID or keyword.
One connection away
Give your agent a direct line to NIST NVD.
Connect NIST NVD once. Keep it beside 5,900+ managed Connectors when the next task needs more.
Explore every Connector No credit card required · Free tier available