CIRCL CVE SEARCH MCP Server
About
MCP server for CIRCL CVE Search API with intelligent risk assessment and comprehensive vulnerability analysis.
Details
- Author
- Cyreslab-AI
- Downloads
- 357
- Categories
- Developer Tools, Security
Jump to
- Access detailed CVE information by ID.
- Browse CVEs by vendor name.
- Retrieve Common Weakness Enumeration (CWE) data.
- Retrieve Common Attack Pattern Enumeration (CAPEC) data.
- Automatic retry with exponential backoff for reliability.
- Structured, readable response formatting.
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
CIRCL CVE SEARCH MCP ServerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Install the package via npm and add it to your MCP client configuration using the command npx @cyreslab/circl-cve-search-mcp-server. The server exposes four tools: get_cve, browse_vendor, get_cwe, and get_capec, each with specific parameters for querying vulnerability data.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"circl cve search mcp server": {
"circl-cve-search": {
"command": "npx",
"args": [
"@cyreslab/circl-cve-search-mcp-server"
]
}
}
}
}McpServers
{
"circl-cve-search": {
"command": "npx",
"args": [
"@cyreslab/circl-cve-search-mcp-server"
]
}
}CIRCL CVE SEARCH MCP Server
A Model Context Protocol (MCP) server for accessing the CIRCL CVE SEARCH API, providing comprehensive vulnerability and security information.
Features
This MCP server provides reliable tools to access:
- CVE Information: Get detailed information about specific Common Vulnerabilities and Exposures
- Vendor Browsing: Browse CVEs by vendor name to discover security issues in specific vendors' products
- CWE Information: Get Common Weakness Enumeration information for understanding vulnerability types
- CAPEC Information: Get Common Attack Pattern Enumeration and Classification data for understanding attack methods
Key Improvements
- Retry Logic: Automatic retry with exponential backoff for reliable API calls
- Enhanced Formatting: Structured, readable response formatting with key information highlighted
- Better Error Handling: Clear, actionable error messages with troubleshooting guidance
- Input Validation: Comprehensive validation and sanitization of all inputs
Installation
npm install @cyreslab/circl-cve-search-mcp-server
Usage
Add this server to your MCP client configuration:
{
"mcpServers": {
"circl-cve-search": {
"command": "npx",
"args": ["@cyreslab/circl-cve-search-mcp-server"]
}
}
}
Available Tools
get_cve
Get detailed information about a specific CVE by its ID.Parameters:
- cve_id (required): CVE identifier (e.g., "CVE-2021-44228")
Example:
{
"name": "get_cve",
"arguments": {
"cve_id": "CVE-2021-44228"
}
}
Response Format:
- Structured CVE data with key information highlighted
- Summary, publication dates, CVSS scores
- Associated weakness types (CWE) and reference counts
- Full raw data for detailed analysis
browse_vendor
Browse CVEs by vendor name to discover security issues in specific vendors' products.Parameters:
- vendor (required): Vendor name (e.g., "apache", "microsoft", "google")
- limit (optional): Number of results to return (default: 10, max: 50)
Example:
{
"name": "browse_vendor",
"arguments": {
"vendor": "apache",
"limit": 15
}
}
Response Format:
- List of CVEs for the specified vendor
- Total count and displayed count
- Vendor name normalization
get_cwe
Get Common Weakness Enumeration (CWE) information by ID.Parameters:
- cwe_id (required): CWE identifier (e.g., "CWE-79", "CWE-89")
Example:
{
"name": "get_cwe",
"arguments": {
"cwe_id": "CWE-79"
}
}
Response Format:
- CWE name and detailed description
- Extended descriptions and weakness ordinalities
- Likelihood of exploit information
- Full raw data for comprehensive analysis
get_capec
Get Common Attack Pattern Enumeration and Classification (CAPEC) information by ID.Parameters:
- capec_id (required): CAPEC identifier (e.g., "CAPEC-66", "CAPEC-89")
Example:
{
"name": "get_capec",
"arguments": {
"capec_id": "CAPEC-66"
}
}
Response Format:
- Attack pattern name and description
- Typical severity and likelihood of attack
- Prerequisites and related weaknesses
- Complete raw data for in-depth analysis
Data Source
This server uses the CIRCL CVE SEARCH API, which provides:
- Comprehensive CVE data from the National Vulnerability Database (NVD)
- Common Platform Enumeration (CPE) information
- Common Weakness Enumeration (CWE) data
- Common Attack Pattern Enumeration and Classification (CAPEC) data
- Regular updates with the latest vulnerability information
Rate Limiting
The CIRCL CVE SEARCH API is free to use and doesn't require authentication. However, please use it responsibly and avoid making excessive requests that could impact the service.
Error Handling
The server handles various error conditions:
- Invalid CVE/CWE/CAPEC ID formats
- Empty search queries
- API rate limiting
- Network errors
- Invalid parameters
Development
Building
npm run build
Running in Development
npm run dev
License
MIT License - see LICENSE file for details.
Contributing
Contributions are welcome! Please feel free to submit a Pull Request.
Support
For issues and questions:
- GitHub Issues: Report an issue
- CIRCL CVE SEARCH API Documentation: https://cve.circl.lu/api/
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
