get_cve_details
Returns the full record for a CVE ID, including its description, CVSS score, severity rating and reference links.
LABSCO SUMMARY
Scoped tightly to the triage question: what is this CVE ID, and what is on record against this product name.
There is no asset inventory, no scanning and no remediation guidance here — get_cve_details returns the NVD record for an ID and search_cves finds records by keyword, which is enough to settle an advisory mid-conversation and not enough to run a vulnerability programme. search_cves is narrowed by keyword and capped by limit with no vendor, severity or date filter in the call, so a broad product keyword is a blunt instrument and a specific one is the way to use it.
What it is
A server over NVD CVE records exposing lookup by CVE ID and keyword search across vulnerability descriptions, product names and vendors.
What you get
- Lookup by identifier: get_cve_details takes a cve_id and returns that record's description, CVSS score, severity and reference links.
- Search for when you have a name and not an ID: search_cves matches a keyword against vulnerability descriptions, product names and vendors, with limit capping how many come back.
Requirements
Nothing — no account, no key.
Setup effort
One command — npx -y nvd-cve-mcp-server
USE CASES
01
Settling what a CVE ID in your inbox actually means
Take the identifier straight from the advisory and read back the description, the score and where the detail was published.
02
Finding what is on record against something you run
Search by the product or vendor name you have rather than an identifier you do not, then open the entries that look relevant in full.
2 tools
Counted once with only startup setup. Other versions, modes or optional credentials may expose a different list.
search_cves
Searches CVE records by keyword, matching against vulnerability descriptions, product names and vendors, with limit capping how many are returned.
BEFORE YOU INSTALL
What to know first
Tools you get
2 tools when we connected.
Requires
- npx on PATH
- Node.js >= 18.0.0
CONTEXT COST
Light Standing cost
Rated by the size of the 2 tool definitions that ride along on every turn, not by how many there are
INSTALLATION
Connect your client
Add the block to your client, or run the command directly.
Server setup
Configuration file
JSON
{
"mcpServers": {
"nvd-cve-mcp-server": {
"command": "npx",
"args": [
"-y",
"nvd-cve-mcp-server"
]
}
}
}npx
TERMINAL
npx -y nvd-cve-mcp-server
