CVE MCP Server
About
A Model Context Protocol server providing CVE vulnerability information query capabilities. This server enables LLMs to query detailed information for specific CVE IDs, retrieving data from MITRE's CVE database.
Details
- Author
- xishir
- Downloads
- 333
- Categories
- Developer Tools
Jump to
- Queries vulnerability information by CVE ID.
- Retrieves data from MITRE’s CVE database.
- Exposes a single query_cve tool for LLM integration.
- Supports both stdio and SSE transports.
- Can be debugged with the MCP inspector.
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
CVE MCP ServerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Install via pip with pip install cve-mcp-server. Configure as stdio (default) using the command uvx cve-mcp-server, or run as an SSE server with uvx cve-mcp-server sse and connect via URL. The server exposes one tool, query_cve, which requires a cve_id string parameter.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"cve mcp server": {
"cve-mcp-server": {
"command": "uvx",
"args": [
"cve-mcp-server",
"sse"
]
}
}
}
}McpServers
{
"cve-mcp-server": {
"command": "uvx",
"args": [
"cve-mcp-server",
"sse"
]
}
}CVE MCP Server
A Model Context Protocol server providing CVE vulnerability information query capabilities. This server enables LLMs to query detailed information for specific CVE IDs, retrieving data from MITRE's CVE database.
Available Tools
- query_cve - Query vulnerability information by CVE ID
- Required parameters:
- cve_id (string): The CVE identifier (e.g., 'CVE-2021-44228', 'CVE-2023-34362')
Install
pip install cve-mcp-server
Configuration
stdio (default)
{
"mcpServers": {
"CVE": {
"command": "uvx",
"args": [
"cve-mcp-server"
]
},
}
}
SSE
Run SSE Serveruvx cve-mcp-server sse
{
"mcpServers": {
"amap-mcp-server": {
"url": "http://localhost:9999"
}
}
}
Debugging
You can use the MCP inspector to debug the server:
npx @modelcontextprotocol/inspector python -m cve-mcp-server
License
cve-mcp-server is licensed under the MIT License. This means you are free to use, modify, and distribute the software, subject to the terms and conditions of the MIT License. For more details, please see the LICENSE file in the project repository.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
