mcp/vuln-nist-mcp-server repository overview

⁠Vuln NIST MCP Server

This MCP server exposes tools to query the NVD/CVE REST API and return formatted text results suitable for LLM consumption via the MCP protocol. It includes automatic query chunking for large date ranges and parallel processing for improved performance.

What is an MCP Server?⁠

⁠MCP Info

⁠Image Building Info

Attribute	Details
Dockerfile	https://github.com/HaroldFinchIFT/vuln-nist-mcp-server/blob/71a45579c7dfcbdd0e639dfb6640801371bf07b6/Dockerfile⁠
Commit	71a45579c7dfcbdd0e639dfb6640801371bf07b6
Docker Image built by	Docker Inc.
Docker Scout Health Score
Verify Signature	COSIGN_REPOSITORY=mcp/signatures cosign verify mcp/vuln-nist-mcp-server --key https://raw.githubusercontent.com/docker/keyring/refs/heads/main/public/mcp/latest.pub
Licence	MIT License

⁠Available Tools (6)

⁠Tools Details

⁠Tool: cve_change_history

Retrieve change history for a CVE or a time window. If no cve_id is provided and the date range exceeds 120 days, the query is split into multiple chunks (max 120 days each) and results aggregated.

⁠Tool: cves_by_cpe

List CVEs associated with a specific CPE

⁠Tool: get_cve_by_id

Retrieve a CVE by its CVE-ID

⁠Tool: get_temporal_context

Get current date and temporal context when it needed.

**USAGE**: Call this tool FIRST when user asks for time-relative question like "this year", "last year", "6 months ago", etc.

Returns current date context and examples for constructing specific date parameters.

⁠Tool: kevs_between

List CVEs added to CISA KEV catalog in a date window. If the requested window exceeds 90 days, the query is automatically split into multiple chunks (max 90 days each) and results are aggregated.

⁠Tool: search_cves

Search CVEs by keyword in description, with flexible time filtering.

**IMPORTANT**: For time-relative queries (this year, last year, etc.), call get_temporal_context() FIRST to get current date information.

**Date filtering logic (in priority order):**
- If start_date and end_date are provided → use them directly
- Else if last_days is provided → calculate start_date = now - last_days
- Else fallback to last 30 days

**Technical notes:**
- If the time period > 120 days, queries are split into 120-day chunks
- start_date, end_date: Use ISO 8601 format: "YYYY-MM-DDTHH:MM:SS"
- recent_days parameter is deprecated, use last_days instead.

⁠Use this MCP Server

{
  "mcpServers": {
    "vuln-nist-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "mcp/vuln-nist-mcp-server"
      ]
    }
  }
}

Why is it safer to run MCP Servers with Docker?⁠