This MCP server provides unified vulnerability intelligence from four government data sources, offering enriched CVE lookups with CVSS scores, exploitation status, and ATT&CK techniques in a single call.
From the registry: CVE lookup via NIST NVD, CISA KEV, EPSS, and MITRE ATT&CK. 7 tools.
$ git clone https://github.com/martc03/gov-mcp-servers.git && cd gov-mcp-servers/servers/cybersecurity-vuln-mcp && npm install && npm run buildPlease install the `cybersecurity-vuln` MCP server into my current AI client (that's you).
Required prerequisites (do these first if not already done):
- **Clone and build** — Clone the monorepo and build the subserver. Run: `git clone https://github.com/martc03/gov-mcp-servers.git && cd gov-mcp-servers/servers/cybersecurity-vuln-mcp && npm install && npm run build` (https://github.com/martc03/gov-mcp-servers)
Canonical MCP server config (stdio transport):
- command: `node`
- args: ["<path-to-gov-mcp-servers>/servers/cybersecurity-vuln-mcp/dist/stdio.js"]
- optional environment variables:
- `NVD_API_KEY`: NVD API key for higher rate limits (50 req/30s vs 5 req/30s). (example: `<your-nvd-api-key>`)
Note: Also available as hosted HTTP at https://cybersecurity-vuln-mcp.apify.actor/mcp.
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.NVD_API_KEYNVD API key for higher rate limits.Dead code, security, secrets detection and code quality for Python, TypeScript, Go.