PluginBench
MCP Server
Active
Apache-2.0

io.github.cyanheads/nist-nvd-mcp-server MCP Server

io.github.cyanheads/nist-nvd-mcp-server

What is the io.github.cyanheads/nist-nvd-mcp-server MCP server?

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

How to install io.github.cyanheads/nist-nvd-mcp-server

Copy-paste configuration for popular MCP clients.

transport: stdio
Config generated by PluginBench — verify against the source before use.
Environment / auth
  • NVD_API_KEY

    NVD API key. Without it, rate limit is 5 req/30s; with it, 50 req/30s. Get one free at nvd.nist.gov/developers/request-an-api-key.

  • NVD_REQUEST_TIMEOUT_MS

    Per-request timeout in milliseconds. Raise to 60000 when using nvd_get_cve_history without an API key.

  • MCP_LOG_LEVEL

    Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').

  • MCP_HTTP_HOST

    The hostname for the HTTP server.

  • MCP_HTTP_PORT

    The port to run the HTTP server on.

  • MCP_HTTP_ENDPOINT_PATH

    The endpoint path for the MCP server.

  • MCP_AUTH_MODE

    Authentication mode to use: 'none', 'jwt', or 'oauth'.

~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "nist-nvd-mcp-server": {
      "command": "bun",
      "args": [
        "-y",
        "@cyanheads/nist-nvd-mcp-server",
        "run",
        "start:stdio"
      ],
      "env": {
        "NVD_API_KEY": "<YOUR_NVD_API_KEY>",
        "NVD_REQUEST_TIMEOUT_MS": "<YOUR_NVD_REQUEST_TIMEOUT_MS>",
        "MCP_LOG_LEVEL": "<YOUR_MCP_LOG_LEVEL>",
        "MCP_HTTP_HOST": "<YOUR_MCP_HTTP_HOST>",
        "MCP_HTTP_PORT": "<YOUR_MCP_HTTP_PORT>",
        "MCP_HTTP_ENDPOINT_PATH": "<YOUR_MCP_HTTP_ENDPOINT_PATH>",
        "MCP_AUTH_MODE": "<YOUR_MCP_AUTH_MODE>"
      }
    }
  }
}

Related MCP servers

Search NOAA CDO stations and datasets, fetch historical weather observations.

2
TypeScript
Apache-2.0
View repository →

Search NOAA climate stations and datasets, fetch historical weather observations.

2
TypeScript
Apache-2.0
View repository →

Find NOAA tide stations and NDBC buoys, fetch tide predictions, currents, and live conditions.

1
TypeScript
Apache-2.0
View repository →

NOAA SWPC space weather: storm scales, Kp index, aurora forecasts, solar wind, activity, alerts.

1
TypeScript
Apache-2.0
View repository →

MCP server for nonprofit financials via ProPublica — IRS Form 990 data for 1.8M+ nonprofits.

2
TypeScript
Apache-2.0
View repository →

Search NPPES providers and resolve NUCC specialty codes via MCP over STDIO or Streamable HTTP.

1
TypeScript
Apache-2.0
View repository →