CVE MCP Server

What it does

Connects Claude AI to professional cybersecurity intelligence databases, allowing security analysts and developers to retrieve threat data, check vulnerability scores, and review security reports without leaving their chat interface.

Tools

• vulnerability_search: Look up specific CVEs or general vulnerability info from NVD and OSV.
• get_epss_score: Retrieve the Exploit Prediction Scoring System (EPSS) score for specific software components.
• infrastructure_check: Summarize domain or IP reputation using Shodan and VirusTotal data.
• get_kev_alerts: Access the CISA Known Exploited Vulnerabilities (KEV) catalog.
• attack_mapping: Map vulnerabilities to MITRE ATT&CK adversary tactics and techniques.

Installation

Download the release and add the following to your claude_desktop_config.json:

{
  "mcpServers": {
    "cve-mcp-server": {
      "command": "python",
      "args": ["-m", "cve_mcp"]
    }
  }
}

Supported hosts

• claude