Official description7 sourcesMCP servers8d ago
HaroldFinchIFT/vuln-nist-mcp-server
๐ โ๏ธ๏ธ ๐ ๐ช ๐ง - Query the NIST National Vulnerability Database (NVD) API
View on GitHub โDirect link ยท no redirect page
Config template (adjust for your client)
claude mcp add vuln-nist-mcp-server -- npx -y vuln-nist-mcp-server
A pasteable skeleton generated from the repository name. Check the project README for the exact package and arguments.
- Star count
- 14 โ ยท HaroldFinchIFT/vuln-nist-mcp-server ยท read from the GitHub search API ยท (checked 2026-10-16 20:00:20)
- Source
- collected from the punkpeye/awesome-mcp-servers list ยท type: MCP server
- Harvest history
- first seen 2026-10-09 ยท last seen 2026-10-16 ยท seen 32ร ยท listed by 7 sources
- Score
- score 703 ยท 14 โ ยท 7 sources ยท mcp
FAQ (answers come from our records)
How do I install it?
We did not find an install command for this repository (our install coverage is only about 4%). Check its README or releases page.
Who is it for?
We filed it under these tags: MCP ๆๅก. The tags come from the entry itself, not a taxonomy we imposed.
Who maintains it?
repository
HaroldFinchIFT/vuln-nist-mcp-server๏ผfirst catalogued 2026-10-09๏ผlast seen 2026-10-16ใThere is no official certification or quality rating here โ we record sources and dates only.Third-party quality signals
vuln-nist-mcp-server
ไปฅไธๆๅฝ่ช่ฏฅไปๅบ็ README๏ผ็ๆฎต๏ผ ยท ๅจ GitHub ่ฏปๅฎๆด README โ
A Model Context Protocol (MCP) server for querying NIST National Vulnerability Database (NVD) API endpoints.
Purpose
This MCP server exposes tools to query the NVD/CVE REST API and return formatted text results suitable for LLM consumption via the MCP protocol. It includes automatic query chunking for large date ranges and parallel processing for improved performance.
Base API docs: https://nvd.nist.gov/developers/vulnerabilities
Features
Available Tools
- **get_temporal_context** - Get current date and temporal context for time-relative queries
- Essential for queries like "this year", "last year", "6 months ago"
- Provides current date mappings and examples for date parameter construction
- **USAGE**: Call this tool FIRST when user asks time-relative questions
- **search_cves** - Search CVE descriptions by keyword with flexible date filtering
- Parameters: keyword, resultsPerPage (default: 20), startIndex (default: 0), last_days (recent_days has been deprecated), start_date, end_date
- **New in v1.1.0**: Support for absolute date ranges with start_date and end_date parameters
- **Date filtering priority**: start_date/end_date โ last_days โ default 30 days
- Auto-chunks queries > 120 days into parallel requests
- Results sorted by publication date (newest first)
- **get_cve_by_id** - Retrieve detailed information for a specific CVE
- Parameters: cve_id
- Returns: CVE details, references, tags, and publication dates
- **cves_by_cpe** - List CVEs associated with a Common Platform Enumeration (CPE)
- Parameters: cpe_name (full CPE 2.3 format required), is_vulnerable (optional)
- Validates CPE format before querying
- **kevs_between** - Find CVEs added to CISA KEV catalog within a date range
- Parameters: kevStartDate, kevEndDate, resultsPerPage (default: 20), startIndex (default: 0)
- Auto-chunks queries > 90 days into parallel requests
- Results sorted by publication date (newest first)
- **cve_change_history** - Retrieve change history for CVEs
- Parameters: cve_id OR (changeStartDate + changeEndDate), resultsPerPage (default: 20), startIndex (default: 0)
- Auto-chunks date range queries > 120 days into parallel requests
- Results sorted by change creation date (newest first)
Key Features
- **Temporal Awareness**: New get_temporal_context tool for accurate time-relative queries
- **Flexible Date Filtering**: Support for both relative (last_days) and absolute (start_date/end_date) date ranges
- **Improved Result Ordering**: All results sorted chronologically (newest first) for better relevance
- **Parallel Processing**: Large date ranges are automatically split into chunks and processed concurrently
- **Input Validation**: CPE format validation, date parsing, parameter sanitization
- **Emoji Indicators**: Clear visual feedback (โ success, โ error, โ ๏ธ warning, ๐ search, ๐ฅ KEV, ๐ CPE, ๐ history, ๐ temporal)
- **Comprehensive Logging**: Detailed stderr logging for debugging
- **Error Handling**: Graceful handling of API errors, timeouts, and malformed responses
Prerequisites
- Docker (recommended) or Python 3.11+
Purpose
This MCP server exposes tools to query the NVD/CVE REST API and return formatted text results suitable for LLM consumption via the MCP protocol. It includes automatic query chunking for large date ranges and parallel processing for improved performance.
Base API docs: https://nvd.nist.gov/developers/vulnerabilities
Features
Available Tools
- **get_temporal_context** - Get current date and temporal context for time-relative queries
- Essential for queries like "this year", "last year", "6 months ago"
- Provides current date mappings and examples for date parameter construction
- **USAGE**: Call this tool FIRST when user asks time-relative questions
- **search_cves** - Search CVE descriptions by keyword with flexible date filtering
- Parameters: keyword, resultsPerPage (default: 20), startIndex (default: 0), last_days (recent_days has been deprecated), start_date, end_date
- **New in v1.1.0**: Support for absolute date ranges with start_date and end_date parameters
- **Date filtering priority**: start_date/end_date โ last_days โ default 30 days
- Auto-chunks queries > 120 days into parallel requests
- Results sorted by publication date (newest first)
- **get_cve_by_id** - Retrieve detailed information for a specific CVE
- Parameters: cve_id
- Returns: CVE details, references, tags, and publication dates
- **cves_by_cpe** - List CVEs associated with a Common Platform Enumeration (CPE)
- Parameters: cpe_name (full CPE 2.3 format required), is_vulnerable (optional)
- Validates CPE format before querying
- **kevs_between** - Find CVEs added to CISA KEV catalog within a date range
- Parameters: kevStartDate, kevEndDate, resultsPerPage (default: 20), startIndex (default: 0)
- Auto-chunks queries > 90 days into parallel requests
- Results sorted by publication date (newest first)
- **cve_change_history** - Retrieve change history for CVEs
- Parameters: cve_id OR (changeStartDate + changeEndDate), resultsPerPage (default: 20), startIndex (default: 0)
- Auto-chunks date range queries > 120 days into parallel requests
- Results sorted by change creation date (newest first)
Key Features
- **Temporal Awareness**: New get_temporal_context tool for accurate time-relative queries
- **Flexible Date Filtering**: Support for both relative (last_days) and absolute (start_date/end_date) date ranges
- **Improved Result Ordering**: All results sorted chronologically (newest first) for better relevance
- **Parallel Processing**: Large date ranges are automatically split into chunks and processed concurrently
- **Input Validation**: CPE format validation, date parsing, parameter sanitization
- **Emoji Indicators**: Clear visual feedback (โ success, โ error, โ ๏ธ warning, ๐ search, ๐ฅ KEV, ๐ CPE, ๐ history, ๐ temporal)
- **Comprehensive Logging**: Detailed stderr logging for debugging
- **Error Handling**: Graceful handling of API errors, timeouts, and malformed responses
Prerequisites
- Docker (recommended) or Python 3.11+
- Source
- awesome ยท https://github.com/HaroldFinchIFT/vuln-nist-mcp-server
- Browse by field
- MCP servers
- Traction
- 14 โ
- added
- yesterday
More in MCP servers
Filed under
Every tag opens the full list for that filter. Counts are the live catalogue figures.