{"data":{"slug":"mukul975-cve-mcp-server","name":"cve-mcp-server","tagline":"Production-grade MCP server providing Claude access to multiple cybersecurity tools and APIs","github_url":"https://github.com/mukul975/cve-mcp-server","owner":"mukul975","repo":"cve-mcp-server","owner_avatar_url":"https://avatars.githubusercontent.com/u/42860185?v=4","primary_language":"Python","stars":1096,"forks":179,"topics":["cisa-kev","claude-ai","cve","cybersecurity","devsecops","epss","fastmcp","mcp","mitre-attack","model-context-protocol","nvd","osv","python","security","shodan","threat-intelligence","virustotal","vulnerability-management"],"archived":false,"github_pushed_at":"2026-07-16T20:58:40+00:00","maintenance_label":"Active","url":"https://www.graphcanon.com/tools/mukul975-cve-mcp-server","markdown_url":"https://www.graphcanon.com/tools/mukul975-cve-mcp-server.md","api_url":"https://www.graphcanon.com/api/graphcanon/tools/mukul975-cve-mcp-server","graph_url":"https://www.graphcanon.com/api/graphcanon/graph?tool=mukul975-cve-mcp-server","description":"Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.","homepage_url":"https://www.mahipal.engineer/CVE-MCP-Server/","license":"Apache-2.0","open_issues":10,"watchers":5,"ai_summary":"This repository hosts a production-ready server that integrates a variety of security intelligence APIs, allowing the LLM 'Claude' to interact with them for improved threat intelligence and vulnerability management.","readme_excerpt":"# 3. Install dependencies\npip install -e .\n\n---\n\n### Step 1: Install (2 minutes)\n\n```bash\ngit clone https://github.com/mukul975/cve-mcp-server.git\ncd cve-mcp-server\npython -m venv venv && source venv/bin/activate\npip install -e .\n```\n\n---\n\n### Scenario 2: \"Scan my Python requirements.txt\"\n\n> **You:** Scan these dependencies: requests==2.28.0, flask==2.2.0, django==3.2.0, pillow==9.0.0, cryptography==37.0.0\n\n```\n→ scan_dependencies(ecosystem=\"PyPI\", packages={...})\n  Found 12 vulnerabilities across 4 packages\n```\n\n**Claude's response:** \"Found **12 vulnerabilities** across your packages. **Immediate action:** Django 3.2.0 (3 critical CVEs including SQL injection), Pillow 9.0.0 (heap overflow), cryptography 37.0.0 (OpenSSL chain). Upgrade to: django>=4.2.16, pillow>=10.3.0, cryptography>=42.0.0.\"\n\n---\n\n### Testing requirements\n\n- All new tools must have at least one offline test with mocked responses\n- Risk score changes must include formula verification test cases\n- Network tools must include a test verifying private IP blocking\n- All tests must pass: `pytest tests/ -v`\n\n---\n\n---\n\n## 📄 License\n\nMIT License — see [LICENSE](LICENSE) for details.\n\n```\nCopyright (c) 2025-2026 Mahipal Jangra (mukul975)\n```\n\n---\n\n<p align=\"center\">\n  Built with 🔐 by <a href=\"https://github.com/mukul975\">Mahipal Jangra</a> · Berlin, Germany<br>\n  <em>Turning security intelligence into conversation.</em>\n</p>","github_created_at":"2026-04-14T11:20:00+00:00","created_at":"2026-07-11T11:52:53.042657+00:00","updated_at":"2026-07-27T06:00:29.12056+00:00","categories":[{"slug":"data-retrieval","name":"Data & Retrieval","url":"https://www.graphcanon.com/categories/data-retrieval","markdown_url":"https://www.graphcanon.com/categories/data-retrieval.md","api_url":"https://www.graphcanon.com/api/graphcanon/categories/data-retrieval"},{"slug":"evaluation-observability","name":"Evaluation & Observability","url":"https://www.graphcanon.com/categories/evaluation-observability","markdown_url":"https://www.graphcanon.com/categories/evaluation-observability.md","api_url":"https://www.graphcanon.com/api/graphcanon/categories/evaluation-observability"}],"tags":[{"slug":"cisa-kev","name":"cisa-kev"},{"slug":"claude-ai","name":"claude-ai"},{"slug":"cve","name":"cve"},{"slug":"cybersecurity","name":"cybersecurity"},{"slug":"devsecops","name":"devsecops"},{"slug":"epss","name":"epss"},{"slug":"fastmcp","name":"fastmcp"},{"slug":"mitre-attack","name":"mitre-attack"}],"trust":{"provenance":{"is_fork":false,"github_id":1210390572,"owner_type":"User","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-07-27T06:00:28.202Z","maintenance":{"label":"Active","score":82,"methodology":"github_public_v1","releases_90d":1,"days_since_push":10,"last_release_at":"2026-06-22T16:40:25Z"},"security_summary":{"status":"no_manifest","scanner":null,"low_count":0,"high_count":0,"last_scan_at":"2026-07-11T11:52:54.144Z","medium_count":0,"scan_profile":"mcp_manifest","critical_count":0}},"capability_facts":{"scan":{"source":"repo_scan","observed_at":"2026-07-27T06:00:28.658Z"},"deploy":{"source":"dockerfile:Dockerfile","self_host":true,"observed_at":"2026-07-27T06:00:28.658Z","managed_saas":false},"has_cli":{"value":true,"source":"pyproject.toml:[project.scripts]","observed_at":"2026-07-27T06:00:28.658Z"},"languages":{"value":["python"],"source":"github.language+pyproject.toml","observed_at":"2026-07-27T06:00:28.658Z"},"has_docker":{"value":true,"source":"dockerfile:Dockerfile","observed_at":"2026-07-27T06:00:28.658Z"},"license_spdx":{"value":"Apache-2.0","source":"github.license","observed_at":"2026-07-27T06:00:28.658Z"}},"decision_facts":{"hosting":{"model":"self_hosted","summary":"This tool needs to be hosted and run on your own infrastructure."},"pricing":null,"requirements":{"notes":["cve-mcp-server requires a Python environment.","Proper API keys for accessing various security tools and APIs are necessary."]},"constraints":{"hosting_model":"self_hosted"},"when_to_use":["Use cve-mcp-server when you need to provide comprehensive threat intelligence and vulnerability management capabilities to the LLM 'Claude', leveraging 27 security intelligence tools.","Consider it if your project specifically requires seamless interaction between Claude and a range of cybersecurity APIs, including but not limited to CVE lookup, EPSS scoring, and CISA KEV."],"when_not_to_use":["Avoid cve-mcp-server if your application does not require integration with the specific set of cybersecurity tools it provides or if a different LLM is preferred.","Do not use this tool if you need to integrate only one or two security APIs; its strength lies in its extensive library of integrations, which might be overkill for smaller scale projects."],"source":"enrich:decision_facts","observed_at":"2026-07-16T23:14:56.377Z"},"constraint_facets":{"hosting_model":"self_hosted"},"decision_summary":[{"label":"Hosting","value":"self hosted - This tool needs to be hosted and run on your own infrastructure."},{"label":"Requirements","value":"cve-mcp-server requires a Python environment.; Proper API keys for accessing various security tools and APIs are necessary."},{"label":"Adopt for","value":"cve-mcp-server offers production-grade integration of Claude with diverse cybersecurity APIs and tools."},{"label":"License detail","value":"Apache-2.0"}]}}