search_vulnerabilitiesLABSCO SUMMARY
The NVD, answerable in a sentence.
The database is public and searchable, but using it means a browser tab and a query syntax. Four tools cover the questions that actually arise: is this thing vulnerable, how bad is it, and exactly which versions are affected.
What it is
A Python MCP server over the NIST National Vulnerability Database. Four tools covering CVE search, CVE detail, per-software checks and the CPE product dictionary. No API key.
What you get
- CVEs searched by keyword or by severity
- One CVE in full — CVSS score, affected products, references
- A named piece of software checked for known vulnerabilities
- The CPE product database searched, for pinning down which product and version a report applies to
Requirements
pip install cybersecurity-mcp-server. No key: it uses the free NIST NVD API.
Setup effort
One command — pip install cybersecurity-mcp-server
USE CASES
Checking a dependency before shipping it
Ask directly whether that software has known CVEs, instead of reading a scanner report later.
Understanding a CVE someone just sent you
Read the full entry — score, affected products, references — before deciding how urgent it is.
Seeing what is serious right now
Search by keyword or severity to find what has landed against the stack you run.
Pinning a vague product name to the right entry
Search the CPE dictionary so the vulnerability you are reading about is the product you actually run.
4 tools
Listed in project docs. Your client may show a different list.
get_cve_detailscheck_software_vulnerabilitiessearch_productsBEFORE YOU INSTALL
What to know first
Tools you get
4 tools named in the project's documentation.
Requires
pip on PATH
INSTALLATION
Connect your client
This project publishes no client configuration, so the entry for your client is yours to write.
Server setup
pip install cybersecurity-mcp-server