cve-search_mcp is a Model Context Protocol (MCP) server used to query the CVE-Search API. It provides comprehensive access to CVE-Search, helping users retrieve vulnerability data through MCP clients.
Main capabilities
- Retrieve JSON containing all vendors.
- Retrieve JSON of all products associated with a vendor.
- Retrieve JSON of all vulnerabilities under a vendor and a specific product.
- Retrieve JSON for a specific CVE ID.
- Retrieve JSON of the latest 30 CVEs, including CAPEC, CWE, and CPE extensions.
- Retrieve more information about the currently used database and its update time.
Usage
- Clone the repository from GitHub (git clone https://github.com/roadwy/cve-search_mcp)。
- Install dependencies.
- Add it to the configuration file of your MCP client (e.g., vscode with Cline/Roo Code), and change "YOU_CVE_SEARCH_MCP_DIR_PATH" to your own directory path.
Applicable scenarios Suitable for querying CVE-Search data through MCP-enabled clients (such as Cline, Roo Code, etc.), for retrieving vendor, product, CVE details, and the latest vulnerabilities.
Limitations This tool depends on the CVE-Search API (see https://github.com/cve-search/cve-search)。资料中未提供其他限制、收费、平台或价格信息。