mukul975

    mukul975/cve-mcp-server

    Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

    security
    cisa-kev
    claude-ai
    cve
    cybersecurity
    devsecops
    Python
    Apache-2.0
    1.7K stars
    282 forks
    1.7K GitHub watchers
    Updated Nov 4, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    No releases in the last 90 days; the most recent was 135 days ago, with 2 contributors on GitHub.

    Use Cases & Benefits

    • Provides a production-grade MCP server integrating 28 security intelligence tools across 24 APIs for comprehensive CVE triage and risk assessment.
    • Enables rapid, correlated security analysis with a one-call orchestrator that aggregates data from multiple sources, reducing manual lookup time drastically.
    • Use for automating vulnerability triage and patch prioritization in enterprise security operations to accelerate decision-making.
    • Use for scanning software dependencies and GitHub advisories to identify and remediate known package vulnerabilities in DevSecOps pipelines.
    • Use for investigating suspicious IP addresses and network threats by aggregating reputation, scanning activity, and vulnerability data from multiple threat intelligence sources.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    Apache 2.0

    Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    • Owned by an individual account with only 2 contributors on GitHub; plan for bus-factor risk.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    AI-powered security intelligence at your fingertips — 28 tools + a one-call triage_cve orchestrator, 24 data sources, one protocol.

    A production-grade Model Context Protocol (MCP) server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal, and GreyNoise, ask Claude one question and get correlated intelligence in seconds. Built with Python, FastMCP, httpx, aiosqlite, Pydantic v2, and defusedxml.

    The problem: Triaging a single CVE means querying NVD for CVSS scores, EPSS for exploitation probability, CISA KEV for active exploitation status, GitHub for patches, and VirusTotal for malware associations — then mentally correlating everything. For 50 CVEs, that's an entire day lost.

    The solution: CVE MCP Server gives Claude direct access to 28 security tools across 24 APIs — fronted by the triage_cve one-call orchestrator. Ask "Should we patch CVE-2024-3400?" and Claude fans out to every relevant source in parallel, calculates a composite risk score (with a CISA KEV hard override), and delivers a prioritized recommendation with evidence.

    I'm running a global academic study measuring how ready security professionals, developers, and enterprise teams actually are for agentic AI — MCP servers, tool calling, governance, and human-in-the-loop workflows.

    If you use this repo, your response would be a genuinely valuable data point.

    📋 Take the survey (10 min): Survey

    Excerpt from the mukul975/cve-mcp-server README on GitHub (Apache-2.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Sep 1: +14Sep 8: +16

    +420 stars over 66 days across 8 snapshot days; best day +16 on Sep 8.

    Forks

    282+53

    Open issues

    15+4

    Compared with peers in Security

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    mukul975/cve-mcp-server compared with Security repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    cloudflare/security-audit-skill61.7K+8.8K17—
    KeygraphHQ/shannon51.2K+1.1K328 days ago
    vxcontrol/pentagi33.5K+7123831 days ago
    Asymptote-Labs/agent-beacon3.3K+36040today
    caddyserver/caddy78.8K+267601 day ago
    mukul975/cve-mcp-server1.7K—29135 days ago
    Category median51.2K+71238—

    Also by mukul975

    Other repositories from this maintainer that GStars tracks

    Discover Repositories

    Search across tracked repositories by name or description