security.cve-search

What security.cve-search does on Mcp

AI agents call security.cve-search to retrieve information from Mcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why security.cve-search is rated Low

This is a read-only information retrieval tool that queries a public database (NIST NVD) to find CVE information. It has no side effects, cannot modify data, and cannot execute code or trigger external operations. The worst-case misuse would be information gathering for reconnaissance, which poses minimal risk compared to other categories. Confidence is high because the operation is clearly a database search/lookup.

From the tool's definition Tool searches the NIST NVD for CVEs by product keyword. The description indicates it performs a query/search operation with no modification, deletion, or execution of code. It retrieves publicly available vulnerability data.

The rule that runs security.cve-search safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For security.cve-search, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "security.cve-search": {}
  }
}

Questions about security.cve-search