Queries the NIST National Vulnerability Database (NVD) via its API.
Connect NVD Database to Claude, Cursor or any other MCP client and it stops being a tab you switch to. Queries the NIST National Vulnerability Database (NVD) via its API. The nvd database mcp server is what makes that connection.
As a prerequisite an NVD API key is required. (Request here).
Installation goes through your MCP client rather than a global install: point it at @modelcontextprotocol/inspector on npm and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.
The toolset is worth reading before you wire it up, because it tells you what the integration is really for:
Description — Retrieves a CVE record by its IDParameters — - cve_id (str): The CVE ID (e.g., CVE-2019-1010218)Returns — Detailed CVE info including scores, weaknesses, and referencesNote — Assumes test_tools.py is copied into the image at /app/tests/. If not, modify the Dockerfile to include:Tools — The server implements the following tools to query the NVD Database:Setup — 2. Clone the Repository: bash git clone https://github.com/marcoeg/mcp-nvd cd mcp-nvdBuild — The Build tool exposed by this serverVerify — The Verify tool exposed by this serverNotes — Here’s the summary formatted as Markdown comments within a code block, suitable for inclusion in a file like docker-compose.yaml or README.md:Assumptions — The Assumptions tool exposed by this serverConfiguration is passed through the environment: NVD_API_KEY. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.
This sits in the database access group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. NVD Database's toolset — Description, Parameters, Returns and 7 more — is a fair guide to whether it matches your workflow. It is maintained by marcoeg; worth a glance at recent repository activity before you build anything load-bearing on it.
This entry was verified against NVD Database's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.
| Tool | What it does |
|---|---|
| Description | Retrieves a CVE record by its ID. |
| Parameters | - cve_id (str): The CVE ID (e.g., CVE-2019-1010218). |
| Returns | Detailed CVE info including scores, weaknesses, and references. |
| Note | Assumes test_tools.py is copied into the image at /app/tests/. If not, modify the Dockerfile to include: |
| Tools | The server implements the following tools to query the NVD Database: |
| Setup | 2. **Clone the Repository**: bash git clone https://github.com/marcoeg/mcp-nvd cd mcp-nvd |
| Build | The Build tool exposed by this server. |
| Verify | The Verify tool exposed by this server. |
| Notes | Here’s the summary formatted as Markdown comments within a code block, suitable for inclusion in a file like docker-compose.yaml or README.md: |
| Assumptions | The Assumptions tool exposed by this server. |
{
"mcpServers": {
"mcp-nvd": {
"command": "/path/to/uvx",
"args": ["mcp-nvd"],
"env": {
"NVD_API_KEY": "your-api-key"
}
}
}
}Configuration as documented by the project. Restart the client after saving.
| Variable | Description | Required |
|---|---|---|
| NVD_API_KEY | Credential the server authenticates with. | Yes |
Read-only SQL access to Postgres — let your assistant inspect schemas and answer questions from real data.
Manage your whole Supabase project in conversation — database, auth, storage, Edge Functions and branches.
Query, modify and analyse local SQLite databases in conversation — the fastest way to chat with a data file.
Metabase ships its own MCP endpoint — search your BI content, build and run queries, and save questions and dashboards without leaving the chat.
Official MongoDB server covering data, schemas and Atlas management — from find queries to spinning up clusters.
Serverless Postgres with database branching — point your assistant at Neon and let it work on disposable copies.