mukul975/cve-mcp-server

Health v2 · maintenance only

Flags: young

Adoption not part of the score

1164 stars · 195 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python-based Model Context Protocol (MCP) server that gives Claude ~28 security intelligence tools across 20+ APIs, including CVE lookup, EPSS scoring, CISA KEV status, MITRE ATT&CK mapping, Shodan, and VirusTotal. It includes a one-call triage_cve orchestrator that fans out to relevant sources in parallel and returns a composite risk score with prioritized remediation guidance.

Use cases

• triage a CVE and get a risk score
• check if a vulnerability is actively exploited in the wild
• look up EPSS exploitation probability for a CVE
• map a CVE to MITRE ATT&CK tactics and techniques
• investigate an IP or domain reputation with Shodan and VirusTotal
• prioritize which of many CVEs to patch first
• query threat intelligence from Claude in natural language

When to choose

• you use Claude or another MCP-compatible AI client and want integrated CVE/threat intelligence
• you need to correlate CVSS, EPSS, KEV, and exploit data across many sources quickly
• you triage vulnerabilities regularly and want automated composite risk scoring
• you want one tool aggregating NVD, Shodan, VirusTotal, GreyNoise, and more

When to avoid

• you need a standalone vulnerability scanner or SIEM rather than an AI assistant tool
• you don't use MCP-compatible clients like Claude
• you can't provide API keys for the commercial sources like Shodan or VirusTotal
• you need guaranteed real-time data for compliance-critical decisions

Facets

service · maturity active

mcp security vulnerability-scanning search-engine api-framework security developer-tools artificial-intelligence large-language-models python self-hosted cli cross-platform mcp-server cve threat-intelligence epss cisa-kev mitre-attack nvd shodan virustotal claude fastmcp vulnerability-management devsecops

Member repositories

For agents

markdown · JSON · MCP: product_card(name="mukul975/cve-mcp-server")