CVE MCP Server Security Intelligence

Skill by ara.so — MCP Skills collection

What This Project Does

CVE MCP Server is a production-grade Model Context Protocol server that transforms Claude into a comprehensive security analyst. It provides 27 security intelligence tools that integrate with 21 different APIs including NVD, EPSS, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, GreyNoise, GitHub, and more.

Instead of manually querying multiple security databases, this MCP server allows Claude to:

• Look up detailed CVE information with CVSS scores and affected products
• Calculate composite risk scores using EPSS, KEV status, and PoC availability
• Search for public exploits and proof-of-concept code
• Check IP addresses against threat intelligence feeds
• Analyze malware samples and indicators of compromise
• Generate executive security reports with prioritized recommendations
• Map vulnerabilities to MITRE ATT&CK techniques

The server runs locally via stdio, makes only outbound HTTPS requests, and supports both free APIs (no key required) and premium services.