Advanced CVE Intelligence MCP Server
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"iflow-mcp-rinadelph-cve-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# CVE-MCP: Advanced CVE Intelligence MCP Server **Author:** Luis Alejandro Rincon (rinadelph) **License:** AGPL-3.0 An advanced Model Context Protocol (MCP) server providing comprehensive CVE vulnerability intelligence with unique analysis capabilities, trend detection, and risk assessment features. ## Overview CVE-MCP goes beyond basic CVE search functionality to provide deep vulnerability intelligence, including exploitability assessments, trend analysis, and bulk vulnerability checking. Built on the MCP framework with SSE transport support, it integrates seamlessly with AI assistants while providing advanced security insights. ## Unique Features - **🔍 Advanced CVE Search**: Multi-criteria search with intelligent caching - **📊 Trend Analysis**: Analyze CVE patterns and distributions over time - **⚠️ Exploit Risk Assessment**: Evaluate exploitability with custom risk scoring - **🚀 Bulk Operations**: Check multiple CVEs simultaneously with summary statistics - **💾 Smart Caching**: In-memory response caching for improved performance - **🔐 Enhanced Security Analysis**: Deep vulnerability insights beyond basic CVSS scores - **📄 Pagination Support**: Handle large result sets efficiently with built-in pagination - **📊 Detailed Logging**: Comprehensive server-side logging for debugging and monitoring ## Installation ### Prerequisites - Python 3.9 or higher - pip package manager - NVD API Key (recommended for higher rate limits) ### Setup 1. Clone the repository: ```bash git clone https://github.com/rinadelph/CVE-MCP.git cd CVE-MCP ``` 2. Install dependencies: ```bash pip install -e . ``` 3. Configure your NVD API key (recommended): ```bash # Set as environment variable export NVD_API_KEY="your-api-key-here" # Or create .env file echo "NVD_API_KEY=your-api-key-here" > .env ``` To obtain an NVD API key: - Visit https://nvd.nist.gov/developers/request-an-api-key - Register for a free API key - API key provides 50 requests/30 seconds (vs 5 without key…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.