Summary
The NVD, answerable in a sentence.
The database is public and searchable, but using it means a browser tab and a query syntax. Four tools cover the questions that actually arise: is this thing vulnerable, how bad is it, and exactly which versions are affected.
What it is
A Python MCP server over the NIST National Vulnerability Database. Four tools covering CVE search, CVE detail, per-software checks and the CPE product dictionary. No API key.
What you get
- CVEs searched by keyword or by severity
- One CVE in full — CVSS score, affected products, references
- A named piece of software checked for known vulnerabilities
- The CPE product database searched, for pinning down which product and version a report applies to
Requirements
Pip install cybersecurity-mcp-server. No key: it uses the free NIST NVD API.
Setup effort
One command — pip install cybersecurity-mcp-server