Cve MCP Server — Security skill for Claude Code
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
How to install Cve MCP Server
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open mukul975/cve-mcp-server and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Cve MCP Server does
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
Alternatives in Security
- Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
- Trail Of Bits Claude-code-config — Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server c 1.6k ★
- Google MCP Security Servers — Security Operations and Threat Intelligence MCP servers 453 ★
README
🛡️ CVE MCP Server
**AI-powered security intelligence at your fingertips — 28 tools + a one-call `triage_cve` orchestrator, 24 data sources, one protocol.** [](https://mahipal.engineer/survey?utm_source=github_badge&utm_medium=readme&utm_campaign=gars2026) [](https://python.org) [](LICENSE) [](https://modelcontextprotocol.io) [](https://github.com/mukul975/cve-mcp-server) [](https://gofastmcp.com)
A production-grade **Model Context Protocol (MCP) server** that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal, and GreyNoise, ask Claude one question and get correlated intelligence in seconds. Built with Python, FastMCP, httpx, aiosqlite, Pydantic v2, and defusedxml.
**The problem:** Triaging a single CVE means querying NVD for CVSS scores, EPSS for exploitation probability, CISA KEV for active exploitation status, GitHub for patches, and VirusTotal for malware associations — then mentally correlating everything. For 50 CVEs, that's an entire day lost.
**The solution:** CVE MCP Server gives Claude direct access to 28 security tools across 24 APIs — fronted by the **`triage_cve`** one-call orchestrator. Ask "Should we patch CVE-2024-3400?" and Claude fans out to every relevant source in parallel, calculates a composite risk score (with a CISA KEV hard
Related Skills
Cve Freshness Loop
Turn a fresh CVE disclosure into a running probe in minutes — KEV/EPSS feed → variant pack or ad-hoc probe → o
Security Threat Intel
Security Threat Intelligence skill for AI code review agents — MITRE ATT&CK infostealer mapping, detection che
MCP Threatintel
Threat intelligence MCP server for Claude Code. IOC lookups, CVE checks, breach monitoring, dark web search, a
My Security Auditor
Comprehensive Claude skill for authorized security auditing — OWASP, MITRE ATT&CK, ISO 27001, SOC 2, PCI-DSS,
Threat Detection Engineer
Expert detection engineer specializing in SIEM rule development, MITRE ATT&CK coverage mapping, threat hunting
Modern Threat Model
STRIDE threat-modeling skill for Claude. Turns an idea, diagram, or code repo into a DFD, threat ledger, score
Related Agents
Engineering Threat Detection Engineer
Expert detection engineer specializing in SIEM rule development, MITRE ATT&CK coverage mapping, threat hunting
Engagement Planner
Delegates to this agent when the user needs to plan a penetration test, define attack methodology, scope an en
Senior Fullstack Engineer
Use this agent when the user needs production-grade software engineering work across the full stack — backend
