gnlds/mcp-cve-intelligence-server-lite

A streamlined **Model Context Protocol (MCP) Server** for cybersecurity intelligence, providing unified access to vulnerability data from multiple authoritative sources including NVD, MITRE, and GitHub Security Advisories. This **Lite version** focuses on core CVE intelligence capabilities with essential features for security professionals.
🚀 Overview
The MCP CVE Intelligence Server Lite is a streamlined **Model Context Protocol (MCP) Server** designed for security professionals, penetration testers, and cybersecurity researchers who need essential vulnerability intelligence integrated into their AI workflows. This **Lite edition** focuses on core features, aggregating data from multiple authoritative sources and delivering actionable security insights through standardized protocols.
> **Status**: Lite edition with core CVE intelligence features and streamlined functionality.
Key Features (Lite Edition)
- **🔍 Multi-Source CVE Intelligence**: Unified access to NVD, MITRE CVE Records, and GitHub Security Advisories
- **🎯 Essential Exploit Discovery**: Pattern-based detection from Exploit-DB, GitHub PoCs, Metasploit, and PacketStorm
- **🧮 EPSS Risk Scoring**: Environmental context-aware vulnerability prioritization with exploit prediction
- **📊 Complete CVSS Support**: Full v4/v3/v2 metric analysis with intelligent severity assessment
- **🔧 CPE-Based Discovery**: Product-specific vulnerability identification using standardized identifiers
- **📈 Trending Analysis**: Real-time vulnerability trending based on severity, exploits, and activity
- **📋 Professional Reports**: Generate security reports in multiple formats (Markdown, JSON, summary)
- **⚡ Performance Optimized**: Intelligent caching, retry logic, and streamlined processing
- **🛡️ Security-First**: Type-safe implementation with comprehensive input validation and sanitization
- **🚦 Rate Limiting**: Intelligent request throttling with source-specific limits
- **📊 Health Monitoring**: Real-time source availability and performance tracking
🛠️ Installation
Prerequisites
- **Node.js**: 20.0.0 or higher
- **npm**: Comes with Node.js
Quick Start
Docker Deployment
Using Pre-built Image (Recommended)
Using Docker Compose
Building from Source
> 📋 **For advanced Docker configuration, customization, and deployment options, see docs/DOCKER.md**
MCP Client Setup
To use this server with MCP-compatible clients, install via NPM and configure:
**VS Code Configuration:**
> 📋 **For complete MCP client configuration (VS Code, Claude Desktop, etc.), see the Configuration section below.**
📖 Usage
MCP Tools Available (Lite Edition)
The server provides **7 essential tools** for comprehensive CVE intelligence and security analysis:
1. searchCves - Advanced CVE Search & Discovery
Search for vulnerabilities using flexible criteria with intelligent filtering:
**Advanced Examples:**
2. getCveDetails - Comprehensive CVE Intelligence
Retrieve detailed vulnerability information with exploit analysis:
**Response includes:**
- Complete CVSS v4/v3/v2 metrics and scoring
- CWE classifications and weakness analysis
- Affected products with CPE identifiers
- Known exploits from multiple sources
- EPSS risk scores and probability
- Vendor advisories and patches
3. getTrendingCves - Real-Time Vulnerability Intelligence
Discover currently trending vulnerabilities based on activity and severity:
**Trending Analysis:**
- Recently disclosed high-impact vulnerabilities
- CVEs with increasing exploit activity
- Vulnerabilities gaining security community attention
- Active discussions and proof-of-concepts
4. calculateEpssScores - Environmental Risk Assessment
Calculate context-aware EPSS scores for vulnerability prioritization:
**Environment Contexts:**
- networkExposure: "internal", "dmz", "internet-facing"
- assetCriticality: "low", "medium", "high", "critical"
- securityControls: Array of deployed security measures