cve-mcp-server
Production-grade MCP server providing Claude access to multiple cybersecurity tools and APIs
GraphCanon updated Sep 20, 2026 · GitHub synced Sep 20, 2026
50views this month
Decision brief
cve-mcp-server offers production-grade integration of Claude with diverse cybersecurity APIs and tools.
Good fit when
- Use cve-mcp-server when you need to provide comprehensive threat intelligence and vulnerability management capabilities to the LLM 'Claude', leveraging 27 security intelligence tools.
- Consider it if your project specifically requires seamless interaction between Claude and a range of cybersecurity APIs, including but not limited to CVE lookup, EPSS scoring, and CISA KEV.
Avoid when
- Avoid cve-mcp-server if your application does not require integration with the specific set of cybersecurity tools it provides or if a different LLM is preferred.
- Do not use this tool if you need to integrate only one or two security APIs; its strength lies in its extensive library of integrations, which might be overkill for smaller scale projects.
- Hosting:
- self hosted - This tool needs to be hosted and run on your own infrastructure.
- Requirements:
- cve-mcp-server requires a Python environment.; Proper API keys for accessing various security tools and APIs are necessary.
Observed Jul 16, 2026 · Source: enrich:decision_facts
Verify the decision
Maintenance and security
Full trust report- Maintenance
- Very active (1d since push)
- As of Sep 20, 2026
- Provenance
- Not a fork · Personal account
- As of Sep 20, 2026
- Security (OSV)
- No MCP manifest
- As of Jul 11, 2026
Public GitHub metadata and optional OSV scans. Signals, not a guarantee. Trust methodology.
Install
pip install cve-mcp-serverSimilar tools
Same-category neighbours. No typed graph edges are catalogued for this tool yet.
Evidence and technical details
Sourced facts, taxonomy, compatibility claims, README excerpt, and machine-readable endpoints.
Overview
This repository hosts a production-ready server that integrates a variety of security intelligence APIs, allowing the LLM 'Claude' to interact with them for improved threat intelligence and vulnerability management.
Capability facts
- Deploy
- Self-host
Source: dockerfile:Dockerfile · Sep 20, 2026
- Docker
- Dockerfile present
Source: dockerfile:Dockerfile · Sep 20, 2026
- CLI
- CLI entrypoint
Source: pyproject.toml:[project.scripts] · Sep 20, 2026
- Languages
- python
Source: github.language+pyproject.toml · Sep 20, 2026
Categories
Compatibility
Sourced claims from the README excerpt - not unsourced marketing copy.
Source: README excerpt (regex_v1, Sep 20, 2026)
python -m venv venv && source venv/bin/activateSource link
Tags
README
3. Install dependencies pip install e . Step 1: Install (2 minutes) Scenario 2: "Scan my Python requirements.txt" You: Scan these dependencies: requests==2.28.0, flask==2.2.0, django==3.2.0, pillow==9.0.0, cryptography==37.0.0 Claude's response: "Found 12 vulnerabilities across y...
For agents
This page has a .md twin and JSON over the API.