Awesome MCP › Security & Reverse Engineering

roadwy/cve-search_mcp

⭐ 106 Python added to this list on 2025-05-14 repository created 2025-03-12

CVE-Search MCP Server exposes the CVE-Search API, a public interface over an aggregated vulnerability database, to MCP clients. Its tools follow the way that API is structured. One returns every vendor known to the database, another returns the products associated with a given vendor, and a third returns the vulnerabilities affecting a specific vendor and product pair — a three-step drill-down that lets a model narrow from a software name to the relevant advisories without guessing identifiers. A further tool retrieves a single CVE by its identifier, and another returns the thirty most recently published CVEs expanded with their CAPEC attack patterns, CWE weakness classifications and CPE platform identifiers, which is what turns a raw advisory into something categorisable. A database-information tool reports which data sources are in use and when they were last updated — worth checking, since a vulnerability lookup against a stale mirror gives a falsely clean answer. It is a Python project requiring 3.10 or newer with uv, and the README documents use from clients including Cline and Roo Code. The audience is security engineers and developers checking dependencies or deployed software against known vulnerabilities during a review or an incident.

https://github.com/roadwy/cve-search_mcp

mcpcvevulnerabilitysecuritypythoncwecapecthreat-intelligence