iflow-mcp_EPSS-MCP

# EPSS MCP Project The EPSS MCP Project is a powerful server designed to retrieve CVE details from the NVD API and fetch EPSS scores from the EPSS server. It provides users with comprehensive vulnerability information, including CVE descriptions, CWEs, CVSS scores, and EPSS percentiles, all in one place. ## Features - **Comprehensive CVE Information**: Fetch detailed vulnerability data, including descriptions, CWEs, and CVSS scores, directly from the NVD API. - **EPSS Integration**: Retrieve EPSS scores and percentiles to assess the likelihood of exploitation for specific vulnerabilities. - **MCP Server**: Serve data through a robust and extensible MCP server for seamless integration with other tools. - **Docker Support**: Easily deploy the server using Docker for a consistent and portable runtime environment. - **VS Code Compatibility**: Integrate with VS Code MCP for enhanced developer workflows and real-time vulnerability insights. ## Prerequisites - Python 3.13 or higher - Docker (optional, for containerized deployment) - An NVD API key (add it to the `.env` file as `NVD_API_KEY`) ## Setup Instructions ### 1. Clone the Repository ```bash git clone <repository-url> cd epss-mcp-project ``` ### 2. Install Dependencies It is recommended to use a virtual environment. You can create one using `venv` or `conda`. Then, install the required packages: ```bash pip install -r requirements.txt ``` ### 3. Add Your NVD API Key Create a `.env` file in the project root and add your NVD API key: ```env NVD_API_KEY=your-nvd-api-key ``` ## Usage ### Installing via Smithery To install EPSS Vulnerability Scoring Server for Claude Desktop automatically via [Smithery](https://smithery.ai/server/@jgamblin/EPSS-MCP): ```bash npx -y @smithery/cli install @jgamblin/EPSS-MCP --client claude ``` ### Running the MCP Server Locally To start the MCP server locally, run: ```bash python epss_mcp.py ``` Once the server is running, you can make requests to retrieve CVE detail…