nist-nvd-mcp-server

by FastDrop

MCP MCP VERIFIED Verified 1 hour ago Registry import free

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE. Official MCP Registry: io.github.cyanheads/nist-nvd-mcp-server@0.4.0. Remote endpoint: https://nist-nvd.caseyjhand.com/mcp

Problem it solves

Discoverable MCP server listed in the official MCP Registry.

How it's different

Remote MCP endpoint ingested from the official registry and probed by FastDrop.

Ingested from the official MCP Registry

FastDrop pulled this entry from the official MCP Registry as io.github.cyanheads/nist-nvd-mcp-server and probed the endpoint. The maker did not submit it, so the outbound link is not endorsed and the description is not theirs.

If this is your server, claim the listing to edit it and take ownership. The registry index lists everything else still awaiting a probe.

Claim this listing

Tools this endpoint exposes

Read directly from the endpoint on 26 Oct 2026. Not supplied by the maker.

nvd_get_cve
Fetch one or more CVEs by ID from the NIST National Vulnerability Database. Returns CVSS scores across all available versions (v2.0, v3.0, v3.1, v4.0), CWE weakness classifications, affected CPE confi
nvd_search_cves
Search CVEs by keyword, severity, CWE, date range, or CISA KEV status. The primary discovery tool for vulnerability surveillance and triage workflows. pubDays and lastModDays expand to date pairs; val
nvd_audit_cpe
Find all CVEs affecting a specific product and version using CPE (Common Platform Enumeration). Requires either an exact CPE name (cpeName) or a partial match string (virtualMatchString) with optional
nvd_search_cpes
Search the NVD CPE (Common Platform Enumeration) dictionary by product keyword or partial match string. Returns CPE names, human-readable titles, and deprecation status. Use before nvd_audit_cpe to re
nvd_get_cve_history
Retrieve the change history for a single CVE — CVSS score revisions, reference additions, status transitions (e.g., "Received" → "Analyzed"), and CPE configuration updates. Use when tracking a CVE's e