#
ENJA

mcp-nvd

marcoeg/mcp-nvd

An MCP server that interfaces with the NIST National Vulnerability Database (NVD) API to retrieve CVE details and execute keyword searches for vulnerabilities.

14 12MITUpdated 2025-03-24
View on GitHubOpen source file

Overview

This Model Context Protocol (NVD MCP Server) integration allows compatible LLM clients like Claude Desktop to query vulnerability data straight from the NIST National Vulnerability Database. It features two primary tools: retrieving explicit CVE records via identifiers and performing keyword-based vulnerability searches with adjustable parameters.

Capabilities

  • ▸Query specific CVE records by ID
  • ▸Search NVD database using keywords and phrases
  • ▸Support for both stdio and SSE transport protocols
  • ▸Configurable result sizes and concise formatting options

Best for

Checking specific CVE details during code reviews or architectural security audits., Searching the NIST vulnerability database for known issues related to specific software libraries or vendors., Integrating vulnerability intelligence directly into an AI coding assistant workflow.

Works with

Claude CodeCursorOpenCode
Evoa Score breakdown= Σ (score × weight)
61
Task usefulness20%77 → +15.4

実タスクにどれだけ役立つか（機能の豊富さ・用途の明確さ）。 — AIによるcapabilities/use-cases解析

Code quality15%85 → +12.8

実装・指示の品質。 — AIによるSKILL.md/README解析

Maintenance15%25 → +3.8

リポジトリがどれだけ活発に保守されているか。 — GitHub 最終push日時の新しさ

Documentation12%34 → +4.1

ドキュメントの充実度・分かりやすさ。 — README/独自要約の情報量

Security15%80 → +12.0

危険・不審な挙動が無いか。 — AIによるセキュリティレビュー

Originality10%60 → +6.0

ありふれたラッパーではない独自性。 — AIによる独自性判定

Popularity8%40 → +3.2

コミュニティの採用度。 — GitHub Stars/Forks（対数スケール）

Compatibility5%75 → +3.8

対応AIエージェントの広さ。 — AIによる対応エージェント判定

Weighted total60.9 / 100

ライセンス不明/制限あり（Red）のSkillは総合スコアに0.85倍の補正を適用します。 ランキングはこのScoreのみで決まり、広告で変わりません。 算出方法の詳細 →

Security considerations

Requires an API key for authentication with the external NIST service. Ensure the NVD API key is securely stored in environment variables and not checked into version control.

Categories

SecurityDevOpsCodingAI Engineering

Summary and analysis are original content generated by AI Skills Rank. The skill's source text is not reproduced here — view it on the linked repository.