About CVE MCP Server
CVE MCP Server is an MCP server for querying vulnerability details by CVE ID from MITRE's CVE database. It is intended for LLM-based tools that need CVE information.
Key features
- 01Query vulnerability details by CVE ID
Use cases
- 01Investigate a specific CVE
MCP support
It exposes the `query_cve` tool to MCP clients, accepting a CVE ID and returning vulnerability information.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project READMECVE MCP Server
A Model Context Protocol server providing CVE vulnerability information query capabilities. This server enables LLMs to query detailed information for specific CVE IDs, retrieving data from MITRE's CVE database.
Available Tools
query_cve- Query vulnerability information by CVE ID- Required parameters:
cve_id(string): The CVE identifier (e.g., 'CVE-2021-44228', 'CVE-2023-34362')
- Required parameters:
Install
pip install cve-mcp-server
Configuration
stdio (default)
{
"mcpServers": {
"CVE": {
"command": "uvx",
"args": [
"cve-mcp-server"
]
},
}
}
SSE
Run SSE Server
uvx cve-mcp-server sse
Use the following configuration to connect directly:
{
"mcpServers": {
"amap-mcp-server": {
"url": "http://localhost:9999"
}
}
}
Debugging
You can use the MCP inspector to debug the server:
npx @modelcontextprotocol/inspector python -m cve-mcp-server
License
cve-mcp-server is licensed under the MIT License. This means you are free to use, modify, and distribute the software, subject to the terms and conditions of the MIT License. For more details, please see the LICENSE file in the project repository.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.