Nist Nvd MCP Server
by cyanheadsio.github.cyanheads/nist-nvd-mcp-serverv0.3.1
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
context tax
queued
security
queued
cold start
queued
freshness
Active19d ago
Install Nist Nvd MCP server
Install in Claude Code
claude mcp add nist-nvd -- npx -y @cyanheads/nist-nvd-mcp-server run start:stdioInstall in Cursor
{
"mcpServers": {
"nist-nvd": {
"command": "npx",
"args": [
"-y",
"@cyanheads/nist-nvd-mcp-server",
"run",
"start:stdio"
]
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).
Install in Claude Desktop
{
"mcpServers": {
"nist-nvd": {
"command": "npx",
"args": [
"-y",
"@cyanheads/nist-nvd-mcp-server",
"run",
"start:stdio"
]
}
}
}Settings → Developer → Edit Config (claude_desktop_config.json), then restart.
Install in VS Code
{
"servers": {
"nist-nvd": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@cyanheads/nist-nvd-mcp-server",
"run",
"start:stdio"
]
}
}
}Add to .vscode/mcp.json in your workspace.
Install in Windsurf
{
"mcpServers": {
"nist-nvd": {
"command": "npx",
"args": [
"-y",
"@cyanheads/nist-nvd-mcp-server",
"run",
"start:stdio"
]
}
}
}Add to ~/.codeium/windsurf/mcp_config.json.
Configuration
| Variable | Required | Secret | Description |
|---|---|---|---|
| NVD_API_KEY | — | — | NVD API key. Without it, rate limit is 5 req/30s; with it, 50 req/30s. Get one free at nvd.nist.gov/developers/request-an-api-key. |
| NVD_REQUEST_TIMEOUT_MS | — | — | Per-request timeout in milliseconds. Raise to 60000 when using nvd_get_cve_history without an API key. |
| MCP_LOG_LEVEL | — | — | Sets the minimum log level for output (e.g., 'debug', 'info', 'warn'). |
| MCP_HTTP_HOST | — | — | The hostname for the HTTP server. |
| MCP_HTTP_PORT | — | — | The port to run the HTTP server on. |
| MCP_HTTP_ENDPOINT_PATH | — | — | The endpoint path for the MCP server. |
| MCP_AUTH_MODE | — | — | Authentication mode to use: 'none', 'jwt', or 'oauth'. |
Remote endpoints
- streamable-http
https://nist-nvd.caseyjhand.com/mcp
Freshness
Active — last maintenance signal 19d ago. The newest of the signals below sets the band.
Last commit (default branch)
2026-09-20 · 19d ago · GitHub
Latest release
2026-09-20 · 19d ago · GitHub · v0.3.1
Package published
no data · npm/PyPI
Registry entry updated
2026-09-20 · 19d ago · official registry · v0.3.1
FAQ
›How do I install the Nist Nvd MCP server in Claude Code?
Run: claude mcp add nist-nvd -- npx -y @cyanheads/nist-nvd-mcp-server run start:stdio. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does Nist Nvd require an API key?
No required environment variables are declared in its published metadata.
›Can I use Nist Nvd as a remote (hosted) MCP server?
Yes — it offers both a hosted endpoint and a local stdio package.
›Is Nist Nvd in the official MCP registry?
Yes, as io.github.cyanheads/nist-nvd-mcp-server.