Cybersecurity MCP Server

CVE database and vulnerability intelligence for AI agents. Search the NIST National Vulnerability Database, check software security, and stay

Local serverstdio

What is the Cybersecurity MCP server?

Cybersecurity MCP server exists for a simple reason — assistants are far more useful when they can act on Cybersecurity directly instead of describing what you should do. CVE database and vulnerability intelligence for AI agents. Search the NIST National Vulnerability Database, check software security, and stay informed about threats.

What you get

  • CVE Search — — Search vulnerabilities by keyword or severity
  • CVE Details — — Full details including CVSS score, affected products, references
  • Software Check — — Check any software for known vulnerabilities
  • CPE Database — — Search products in the Common Platform Enumeration
  • No API Key — — Uses the free NIST NVD API

What the assistant can call

Once Cybersecurity is connected, these are the calls the assistant has available:

  • search_vulnerabilities — Search CVE database by keyword
  • get_cve_details — Get full CVE details by ID
  • check_software_vulnerabilities — Check a software for known CVEs
  • search_products — Search CPE product database

Setting it up

cybersecurity-mcp-server on PyPI is all you need. Most clients run it directly, so configuration is a few lines and a restart.

Choosing this one

Plenty of database access servers cover similar ground. The differences that matter in practice are scope of access and how much setup stands between you and a working tool call. Cybersecurity's toolset — search_vulnerabilities, get_cve_details, check_software_vulnerabilities and 1 more — is a fair guide to whether it matches your workflow. It is maintained by aiagentkarl; worth a glance at recent repository activity before you build anything load-bearing on it.

We check each listing at SyncDev against the project's documentation before it goes live — if something here drifts out of date, it is a bug worth reporting.

Before you rely on it

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • MCP clients confirm each tool call by default. Leave that on until you have watched what the cybersecurity mcp server does with a few real requests.

Available tools

ToolWhat it does
search_vulnerabilitiesSearch CVE database by keyword
get_cve_detailsGet full CVE details by ID
check_software_vulnerabilitiesCheck a software for known CVEs
search_productsSearch CPE product database

How to install the Cybersecurity MCP server

{
  "mcpServers": {
    "cybersecurity": {
      "command": "uvx",
      "args": ["cybersecurity-mcp-server"]
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Example prompts to try

  • Use Cybersecurity to search vulnerabilities.
  • Use Cybersecurity to get cve details.
  • Use Cybersecurity to check software vulnerabilities.

Frequently asked questions

It connects Cybersecurity to MCP-compatible AI assistants such as Claude and Cursor, exposing 4 tools (search_vulnerabilities, get_cve_details, check_software_vulnerabilities, and more) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with Cybersecurity directly.