CVE MCP Server
A production-grade MCP server giving an AI model twenty-eight security-intelligence tools across two dozen sources, including NVD, EPSS, CISA KEV, Shodan and VirusTotal, correlated behind one call.
CVE MCP Server is a Model Context Protocol server that turns an AI model into a security analyst able to triage vulnerabilities without a human juggling many browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal and other sources. It exposes twenty-eight tools across twenty-four data sources, fronted by a one-call orchestrator that fans a question, such as whether to patch a given CVE, out to every relevant source in parallel and calculates a composite risk score, with a hard override when CISA's Known Exploited Vulnerabilities catalog flags active exploitation.
It is built with Python, FastMCP, httpx, aiosqlite, Pydantic and defusedxml, sends only outbound HTTPS traffic with no inbound ports opened, loads API keys from environment variables that are never logged, and blocks lookups against private or internal IP addresses. It is licensed under Apache 2.0.