Active✓ In official registry

io.github.cyanheads/nist-nvd-mcp-server

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and C

67
TrustScore
✅ No clear abandonment signal detected; complete security and compatibility checks before production use

Before you connect

🔑 Needs an API key / tokenNode.jsDocker

Config example (to connect)

{
  "mcpServers": {
    "nist-nvd-mcp-server": {
      "type": "stdio",
      "command": "bunx",
      "args": ["@cyanheads/nist-nvd-mcp-server@latest"],
      "env": {
        "MCP_TRANSPORT_TYPE": "stdio",
        "MCP_LOG_LEVEL": "info",
        "NVD_API_KEY": "your-api-key"
      }
    }
  }
}

Works with these clients

  • Claude Desktopnpx
  • Claude Codenpx
  • Cursornpx
  • VS Codenpx
  • Windsurfnpx

Derived from the registry manifest (package type and transport) — we have not installed it ourselves. Check the official README before relying on it.

Install / Connect

claude mcp add nist-nvd-mcp-server -- npx -y @cyanheads/nist-nvd-mcp-server@0.2.0

Follow the official README; env and args vary per server.

🛠️ Maintenance weight 30% · 87 pts

📝
Last commit16 days ago
📈
Commits in 90 days50
💬
Recent issues with replies100%
🗃️
Repo statusNormal

📊 Adoption weight 25% · 20 pts

GitHub stars1 (90d +0%)
📦
npm weekly downloadsNot npm-distributed
🚀
Releases per month3

✅ Usability weight 20% · 100 pts

📋
Official registryListed
▶️
Runnable entryResolvable (npx/remote)
🔍
AuditabilityOpen-source repo, auditable

❤️ Health & community weight 25% · 53 pts

🐛
open issues1
🔀
open PRs
⚖️
LicenseApache-2.0
👥
Contributors / forks1 / 1

Sources: GitHub API · npm registry · Official registry · updated 2026-08-16

90-day trend

⭐ stars +0%

📦 weekly downloads +0%

Similar / alternative servers

How to choose among these

Search servers all give web access; they differ between semantic retrieval and cited Q&A.

  • Semantic web search + content (research / competitors)Pick Exa — semantic search plus retrieval
  • Distilled Q&A-style answers, fact-checkingPick Tavily / Perplexity — AI-optimized answers
  • Privacy-focused, general web/news searchPick Brave Search

One email a week, 5 minutes to see what happened in the MCP ecosystem

New servers, breakout trends, abandonment alerts — tracked automatically, curated by hand, sent to your inbox.

One email a week · unsubscribe anytime · no data selling