CVE漏洞搜索服务

mcp-cve是一款CVE漏洞搜索服务,通过NVD支持按关键词、严重级别、日期范围和受影响产品检索CVE漏洞信息,适用于安全研究与漏洞管理场景。

  • by PetrefiedThunder
  • TypeScript
  • 本地部署
  • 更新于
在 GitHub 查看 PetrefiedThunder/mcp-cve

使用说明

mcp-cve

Search the NVD for CVEs by keyword, severity, date range, or affected product.

Tools

Tool Description
search_cves Search CVEs by keyword.
get_cve Get details for a specific CVE ID.
recent_cves Get recently published CVEs.
cves_by_severity Search CVEs by CVSS severity.
cves_by_cpe Search CVEs affecting a specific product (CPE).

Configuration

Variable Required Description
NVD_API_KEY Yes NVD API key (optional, increases rate limit)

Installation

git clone https://github.com/PetrefiedThunder/mcp-cve.git
cd mcp-cve
npm install
npm run build

Usage with Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "cve": {
      "command": "node",
      "args": ["/path/to/mcp-cve/dist/index.js"],
      "env": {
        "NVD_API_KEY": "your-nvd-api-key"
      }
    }
  }
}

Usage with npx

npx mcp-cve

License

Apache-2.0