NIST NVD MCP Server

Connect to the National Vulnerability Database (NVD) API through your AI agent and explore the world's most comprehensive archive of cybersecurity vulnerabilities and product data using natural conversation.

What you can do

• CVE Discovery — Search for Common Vulnerabilities and Exposures (CVEs) by ID, keyword, or specific weakness (CWE).
• Product Security — Find all vulnerabilities associated with a specific product or version using its Common Platform Enumeration (CPE) string.
• Severity Analysis — Filter vulnerabilities based on their CVSS V3 severity level (Low to Critical) to prioritize risks.
• Temporal Tracking — Search for CVEs published or modified within specific date ranges to monitor recent threats.
• Product Dictionary — Query the official CPE dictionary by keyword or UUID to identify software and hardware products.
• Change History — Retrieve a detailed log of updates and modifications made to the vulnerability database.

How it works

1. Subscribe to this server
2. (Optional) Enter your NIST NVD API Key for higher rate limits
3. Start exploring vulnerability intelligence from Claude, Cursor, or any MCP client

Who is this for?

• Security Researchers & Analysts — quickly retrieve CVE details or CVSS scores for risk assessment and mitigation.
• DevOps & IT Teams — monitor for new vulnerabilities affecting the specific products and versions in your stack.
• Compliance Officers — automate the gathering of vulnerability data for security audits and reporting.