mukul975

Cve Mcp Server

Name: Cve Mcp Server
Author: mukul975

Security community

SOURCE https://github.com/mukul975/cve-mcp-server

Description

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

🛡️ CVE MCP Server

![CVE MCP Server](assets/banner.png)

**AI-powered security intelligence at your fingertips — 28 tools + a one-call `triage_cve` orchestrator, 24 data sources, one protocol.** [![GARS-2026 Survey](https://img.shields.io/badge/GARS--2026-Take%20the%20Survey-E8B84B?style=for-the-badge&logo=googleforms&logoColor=black)](https://mahipal.engineer/survey?utm_source=github_badge&utm_medium=readme&utm_campaign=gars2026) [![Python 3.10+](https://img.shields.io/badge/Python-3.10%2B-3776AB?style=flat-square&logo=python&logoColor=white)](https://python.org) [![License: MIT](https://img.shields.io/badge/License-MIT-green?style=flat-square)](LICENSE) [![MCP Compatible](https://img.shields.io/badge/MCP-Compatible-blue?style=flat-square)](https://modelcontextprotocol.io) [![Security Tool](https://img.shields.io/badge/Security-Intelligence-red?style=flat-square&logo=shield)](https://github.com/mukul975/cve-mcp-server) [![FastMCP](https://img.shields.io/badge/FastMCP-Python-00d4ff?style=flat-square)](https://gofastmcp.com)

A production-grade **Model Context Protocol (MCP) server** that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal, and GreyNoise, ask Claude one question and get correlated intelligence in seconds. Built with Python, FastMCP, httpx, aiosqlite, Pydantic v2, and defusedxml.

**The problem:** Triaging a single CVE means querying NVD for CVSS scores, EPSS for exploitation probability, CISA KEV for active exploitation status, GitHub for patches, and VirusTotal for malware associations — then mentally correlating everything. For 50 CVEs, that's an entire day lost.

**The solution:** CVE MCP Server gives Claude direct access to 28 security tools across 24 APIs — fronted by the **`triage_cve`** one-call orchestrator. Ask "Should we patch CVE-2024-3400?" and Claude fans out to every relevant source in parallel, calculates a composite risk score (with a CISA KEV hard