← Back to search

io.github.cyanheads/nist-nvd-mcp-server

cyanheads Scanned 24d ago

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

MCP Registry ↗
B
87.4 / 100

Versions

0.1.10latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

nvd_get_cve_history
annotations: verified low

Retrieve the change history for a single CVE — CVSS score revisions, reference additions,

cveId string input object output object changeDate string
readOnlyHint true openWorldHint false idempotentHint true
nvd_search_cpes
annotations: verified low

Search the NVD CPE (Common Platform Enumeration) dictionary by product keyword or partial match string.

input object output object
readOnlyHint true openWorldHint false
nvd_audit_cpe
annotations: verified low

Find all CVEs affecting a specific product and version using CPE (Common Platform Enumeration).

input object versionEnd string
readOnlyHint true openWorldHint false idempotentHint true
nvd_search_cves
annotations: verified low

Search CVEs by keyword, severity, CWE, date range, or CISA KEV status.

input object
readOnlyHint true openWorldHint false
nvd_get_cve
annotations: verified low

Fetch one or more CVEs by ID from the NIST National Vulnerability Database.

brief boolean input object output object returned number requested number
readOnlyHint true openWorldHint false idempotentHint true

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 20

medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
Tool 'nvd_get_cve_history' annotations are consistent annotation_checker · 80%
info
Tool 'nvd_search_cpes' annotations are consistent annotation_checker · 80%
info
Tool 'nvd_audit_cpe' annotations are consistent annotation_checker · 80%
info
Tool 'nvd_search_cves' annotations are consistent annotation_checker · 80%
info
Tool 'nvd_get_cve' annotations are consistent annotation_checker · 80%
info
package.json metadata manifest_parser · 100%
info
Tool: nvd_get_cve_history manifest_parser · 75%
info
Tool: nvd_search_cpes manifest_parser · 75%
info
Tool: nvd_audit_cpe manifest_parser · 75%
info
Tool: nvd_search_cves manifest_parser · 75%
info
Tool: nvd_get_cve manifest_parser · 75%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 11 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-nist-nvd-mcp-server-3ebdc37/framework-skills/api-utils/references/security.md secret_scanner · 65%