MCP servers and skills: search, filter by where they run, and compare.
1–24 of 27 tools for “nvd”
Clear allSearch and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.
Node.jsApache-2.0★ 1Few starsNo key
An MCP server to query the NIST National Vulnerability Database (NVD)
PythonMIT★ 15No key
MCP server for CVE vulnerability data via NIST National Vulnerability Database API
Hosted by authorMITFew starsNo key
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
PythonApache-2.0★ 1.6kNo key
CVE ingestion + enrichment pipeline with an MCP server for AI agents.
PythonMIT★ 38No key
13 production MCP servers for US government data — safety recalls, cybersecurity vulnerabilities, disasters, finance, and more
Hosted by authorMIT★ 6No key
Vulnerability-intelligence MCP server for AI agents: CVE lookups (NVD) and dependency-manifest audits (OSV). Keyless.
Hosted by authorMITFew starsNo key
GhostFree is a local MCP server that scans your repository's dependencies for known vulnerabilities based on issued CVEs using OSV.dev, helps you triage and fix findings with NVD and CISA KEV enrichme
Node.jsMIT★ 1Few starsNo key
MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), domain & web intel, threat intel.
Hosted by authorMIT★ 33No key
MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, version, SBOM and lockfile checks, vendor advisories, and per-C
Node.jsMIT★ 7No key
Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping
PythonMIT★ 14No key
IDE-style navigation for structured data — code, JSON, YAML. Jump to definitions, find callers, follow references. Available as an MCP server or a mounted folder.
GoApache-2.0★ 46No key
Supply Chain Scanner is a local-first security tool that scans your project dependencies, developer environment, and IDE extensions for known vulnerabilities using multiple intelligence sources (OSV,
PythonMITFew starsNo key
Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS, CISA KEV, OSV and GHSA.
MCPLink only★ 49
MCP server for cybersecurity operations — compliance, vuln scans, code security, threat intel. Pay-per-use via x402.
Hosted by authorMIT★ 1Few starsNo key
CIRCL Vulnerability-Lookup — aggregated vulnerability records
Hosted by authorMITFew starsNo key
CVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.
Hosted by authorNo licenseFew starsNo key
Should you care about this CVE? An agent skill that triages whether a CVE applies to your environment, with sourced, verifiable reasoning.
SkillMIT★ 4Few starsNo key
AbuseIPDB MCP — wraps AbuseIPDB v2 API (api.abuseipdb.com/api/v2)
Hosted by authorMITFew starsNo key
MCP Server per CVE PostgreSQL — Query CVEs, yanked releases, exploits e upgrade path per qualsiasi versione di PostgreSQL direttamente dal tuo AI assistant.
PythonApache-2.0Few starsNo key
Use this skill when the user asks to "find CVEs for", "check if my domain is breached", "threat intel on", "OSINT on", "security news about", "attack surface of", "is this IP malicious", "what vulnera
OfficialSkillApache-2.0★ 275 in collectionNo key
Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research
SkillMIT★ 570No key
Free, open source website technology detection. Identify any site's full tech stack from its URL — CLI, library and MCP server for Claude, Claude Code, Codex and ChatGPT. No API key, no credits, no su
Node.jsMIT★ 9No key
Autonomous Network Attack Forecasting & Multi-Agent SOC Co-Pilot powered by Temporal World Models, MITRE ATT&CK, CAPEC, CVE/NVD, and Dual Statutory Reporting (CERT-In + NCIIPC). Built for SIH 2026 (PS
SkillMIT★ 4Few starsNo key
Who stands behind it
