Koskamo

Vuln NIST MCP

This MCP server exposes tools to query the NVD/CVE REST API and return formatted text results suitable for LLM consumption via the MCP protocol. It includes automatic query chunking for large date ranges and parallel processing for improved performance.

Package and access

Local package with source-attributed installation metadata. Koskamo does not execute packages during review.

Vuln NIST MCP logo, by HaroldFinchIFTCommunity listingLocal stdioSource reviewed; not executedPublished by HaroldFinchIFT
Vendor documentation

What you can do with it

  • Search CVE descriptions by keyword with flexible date filtering
  • Retrieve detailed information for a specific CVE
  • List CVEs associated with a Common Platform Enumeration (CPE)
  • Find CVEs added to CISA KEV catalog within a date range

Source and maintenance

Community listing
docker-mcp: vuln-nist-mcp-serverSource repositoryProject website
Maintenance checked

Packages and installation

Source-provided package data. Koskamo has not executed or live-probed this package.

mcp/vuln-nist-mcp-server@sha256:e5025e66c0d28a4fb4b00f4762b91309f2538ab5ade9a9d2ea10cfacf5c04645

oci
mcp/vuln-nist-mcp-server@sha256:e5025e66c0d28a4fb4b00f4762b91309f2538ab5ade9a9d2ea10cfacf5c04645 package definition
{
  "transport": "stdio",
  "identifier": "mcp/vuln-nist-mcp-server@sha256:e5025e66c0d28a4fb4b00f4762b91309f2538ab5ade9a9d2ea10cfacf5c04645",
  "registryType": "oci",
  "registryBaseUrl": "https://registry-1.docker.io"
}

Tools

Reported by the attributed source; not independently observed by Koskamo.

cve_change_history
Reported by the attributed source; not independently observed by Koskamo.
cve_change_history input schema
{
  "type": "",
  "required": null,
  "properties": null
}
cves_by_cpe
Reported by the attributed source; not independently observed by Koskamo.
cves_by_cpe input schema
{
  "type": "",
  "required": null,
  "properties": null
}
get_cve_by_id
Reported by the attributed source; not independently observed by Koskamo.
get_cve_by_id input schema
{
  "type": "",
  "required": null,
  "properties": null
}
get_temporal_context
Reported by the attributed source; not independently observed by Koskamo.
get_temporal_context input schema
{
  "type": "",
  "required": null,
  "properties": null
}
kevs_between
Reported by the attributed source; not independently observed by Koskamo.
kevs_between input schema
{
  "type": "",
  "required": null,
  "properties": null
}
search_cves
Reported by the attributed source; not independently observed by Koskamo.
search_cves input schema
{
  "type": "",
  "required": null,
  "properties": null
}

Connect from your client

Each snippet configures the same source-provided package; replace placeholders before use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Cursor

Merge this local stdio configuration, replace every placeholder environment value, and restart Cursor. Koskamo has not executed this package.
Cursor configuration
{
  "mcpServers": {
    "vuln-nist-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "mcp/vuln-nist-mcp-server@sha256:e5025e66c0d28a4fb4b00f4762b91309f2538ab5ade9a9d2ea10cfacf5c04645"
      ]
    }
  }
}

Cline

Merge this local stdio configuration, replace every placeholder environment value, and restart Cline. Koskamo has not executed this package.
Cline configuration
{
  "mcpServers": {
    "vuln-nist-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "mcp/vuln-nist-mcp-server@sha256:e5025e66c0d28a4fb4b00f4762b91309f2538ab5ade9a9d2ea10cfacf5c04645"
      ]
    }
  }
}

VS Code

Merge this local stdio configuration, replace every placeholder environment value, and restart VS Code. Koskamo has not executed this package.
VS Code configuration
{
  "servers": {
    "vuln-nist-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "mcp/vuln-nist-mcp-server@sha256:e5025e66c0d28a4fb4b00f4762b91309f2538ab5ade9a9d2ea10cfacf5c04645"
      ]
    }
  }
}

Claude Desktop

Merge this local stdio configuration, replace every placeholder environment value, and restart Claude Desktop. Koskamo has not executed this package.
Claude Desktop configuration
{
  "mcpServers": {
    "vuln-nist-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "mcp/vuln-nist-mcp-server@sha256:e5025e66c0d28a4fb4b00f4762b91309f2538ab5ade9a9d2ea10cfacf5c04645"
      ]
    }
  }
}

Let your agent find its tools

Find servers like Vuln NIST MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows
See all 7,400