// SCAN REPORT

CVE MCP Server

27 tools. 0 can modify or destroy data without limits.

Read-only server. Low risk, but rate limits prevent runaway API costs.

Last updated: 10 Jun 2026

0 can modify or destroy data

27 read-only

27 tools total

Community server · catalogue entry verified 10/06/2026

How to control CVE MCP Server ↓

TOOL MAP

What CVE MCP Server exposes to your agents

Read (27) Write / Execute (0) Destructive / Financial (0)

Running more than one server? Check your whole stack →

THE RISK

What can go wrong

Even read-only tools carry cost. An agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up bills.

POLICY

How to control CVE MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and CVE MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "parse_cvss": {
    "limits": [
      {
        "counter": "parse_cvss_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register CVE MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON CVE →

Free to start. No card required.

FULL CATALOGUE

All 27 CVE MCP Server tools

READ 27 tools

Read parse_cvss Parse and explain a CVSS vector string (v2, v3.x, or v4.0). Args: vector: CVSS vector string (e.g Read calculate_risk_score Calculate a composite 0-100 risk score using CVSS, EPSS, KEV, and PoC data. Read check_exploit_availability Search GitHub for public proof-of-concept (PoC) exploit repositories for a CVE. Results are sorted by star Read check_ip_reputation Check an IP address reputation via AbuseIPDB and GreyNoise Community. Returns abuse confidence score, coun Read check_kev Check if a CVE is in the CISA Known Exploited Vulnerabilities (KEV) catalog. Args: cve_id: CVE id Read check_package_vulns Check a package for known vulnerabilities via OSV.dev. Args: package: Package name (e.g. log4j-co Read check_poc_exists Search for proof-of-concept exploits across GitHub, Exploit-DB, and Nuclei templates. Read check_ransomware_intel Check if a Bitcoin address is associated with a known ransomware family using the Ransomwhere database. Read check_url_safety Check a URL or domain for malicious activity via URLScan.io. Returns scan verdicts, malicious flag, score, Read compare_cves Compare multiple CVEs by risk score and generate a patch priority ranking. Read get_attack_mapping Map a CVE to MITRE ATT&CK techniques and associated threat groups. Downloads the ATT&CK dataset lazily (ca Read get_cve_summary Get a comprehensive one-page summary of a CVE: severity, EPSS, KEV status, description, weaknesses, and ti Read get_cve_timeline Build a complete CVE lifecycle timeline: NVD publication date, EPSS score history, CISA KEV addition date, Read get_domain_intel Get domain intelligence: certificate transparency logs (crt.sh) and passive DNS records (CIRCL PDNS). Retu Read get_epss_score Get EPSS (Exploit Prediction Scoring System) scores for one or more CVEs. Args: cve_ids: Comma-se Read get_vendor_advisory Fetch vendor security advisories for a CVE from Microsoft (MSRC), Red Hat, and Ubuntu. Shows patch availab Read health_check Check the health of the CVE MCP server: NVD connectivity, KEV catalog status, and cache statistics. N Read lookup_cve Look up a CVE by ID from NVD. Returns full details including CVSS scores, description, weaknesses, and CIS Read lookup_file_hash Look up a file hash (MD5/SHA1/SHA256) against MalwareBazaar and VirusTotal. Returns malware family, detect Read lookup_malware_family Look up an IOC (IP, domain, URL, or hash) against ThreatFox for malware family attribution. Returns confid Read passive_dns_lookup Query CIRCL Passive DNS for historical DNS resolutions of an IP or domain. Shows what hostnames have resol Read scan_container_packages Scan container image packages (Alpine, Debian, Ubuntu OS packages) for known CVEs via OSV.dev. Input shoul Read scan_dependencies Bulk scan application dependencies for known CVEs via OSV.dev. Supports requirements.txt (PyPI), package.j Read scan_repo_secrets Search GitHub public repositories for potential exposed credentials or secrets related to a search term (C Read search_cves Search NVD for CVEs by keyword and optional severity filter. Args: query: Keyword to search (lett Read shodan_host_lookup Look up a host on Shodan: open ports, running services, OS, CVEs on the host. Requires SHODAN_KEY environm Read generate_vuln_report Generate a vulnerability report in executive, technical, or full format.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about CVE MCP Server

Is the CVE MCP Server MCP server safe to use without restrictions? +

The CVE MCP Server server is primarily read-only with 27 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the CVE MCP Server MCP server expose? +

27 tools across 3 categories: Execute, Read, Write. 27 are read-only. 0 can modify, create, or delete data.

How do I enforce a policy on CVE MCP Server? +

Register the CVE MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every CVE MCP Server tool call.

Deterministic rules across all 27 CVE MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON CVE →

Free to start. No card required.

27 CVE MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.