生产级MCP服务器为Claude提供27项安全情报工具，涵盖21个API——CVE查找、EPSS评分、CISA KEV、MITRE ATT&CK、Shodan、VirusTotal等。
概览
一款生产级工具，将Claude变成全方位的安全分析师。无需在NVD、EPSS、CISA KEV、Shodan、VirusTotal和GreyNoise等15+个浏览器标签页中奔波，只需问Claude一个问题，几秒钟内就能获得相关情报。采用Python、FastMCP、httpx、aiosqlite、Pydantic v2和defusedxml构建。 对单个CVE进行分流意味着查询NVD的CVSS分数，EPSS的利用概率，CISA KEV的活跃利用状态，GitHub的补丁，以及VirusTotal的恶意软件关联——然后在脑海中对所有信息进行关联。对于50个CVE，这就意味着白白浪费了整整一天的时间。 CVE MCP 服务器让 Claude 能够直接访问 24 个 API 上的 28 个安全工具——由一调用编排器作为前台。问“我们是否应该修补 CVE-2024-3400？”，Claude 会并行向所有相关来源发送，计算综合风险评分（并使用 CISA KEV 硬覆盖），并提供带有证据的优先级建议。
概述（AI 翻译）
AI驱动的安全智能触手可及——28个工具+一个一调用triage_cve编排器，24个数据源，一个协议。
一个生产级模型上下文协议（MCP）服务器，将Claude变成全谱安全分析师。你无需在NVD、EPSS、CISA KEV、Shodan、VirusTotal和GreyNoise等15+个浏览器标签页间操作，只需问Claude一个问题，几秒钟内就能获得相关智能。采用Python、FastMCP、httpx、aiosqlite、Pydantic v2和defusedxml构建。
问题所在： 对单个CVE进行分流意味着要查询NVD的CVSS分数，EPSS的利用概率，CISA KEV的活跃利用状态，GitHub的补丁，以及VirusTotal的恶意软件关联——然后在脑海中对应所有信息。对于50个CVE，这就意味着白费了整整一天。
解决方案： CVE MCP 服务器让 Claude 能够直接访问 24 个 API 上的 28 个安全工具——由 triage_cve 一调用编排器作为前台。问“我们是否应该修补 CVE-2024-3400？”，Claude 会并行地向所有相关来源发送，计算综合风险评分（并使用 CISA KEV 硬覆盖），并提供带有证据的优先级建议。
本页由 AI 翻译，技术细节请以原文为准。
README
以下为原文 README 节选，完整内容请查看原文。
🛡️ CVE MCP Server
AI-powered security intelligence at your fingertips — 28 tools + a one-call triage_cve orchestrator, 24 data sources, one protocol.
A production-grade Model Context Protocol (MCP) server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal, and GreyNoise, ask Claude one question and get correlated intelligence in seconds. Built with Python, FastMCP, httpx, aiosqlite, Pydantic v2, and defusedxml.
The problem: Triaging a single CVE means querying NVD for CVSS scores, EPSS for exploitation probability, CISA KEV for active exploitation status, GitHub for patches, and VirusTotal for malware associations — then mentally correlating everything. For 50 CVEs, that’s an entire day lost.
The solution: CVE MCP Server gives Claude direct access to 28 security tools across 24 APIs — fronted by the triage_cve one-call orchestrator. Ask “Should we patch CVE-2024-3400?” and Claude fans out to every relevant source in parallel, calculates a composite risk score (with a CISA KEV hard override), and delivers a prioritized recommendation with evidence.
🌍 GARS-2026 — Global Agentic AI Readiness Survey
I’m running a global academic study measuring how ready security professionals, developers, and enterprise teams actually are for agentic AI — MCP servers, tool calling, governance, and human-in-the-loop workflows.
If you use this repo, your response would be a genuinely valuable data point.
📋 Take the survey (10 min): Survey
- 60 questions · Anonymous · Supervised by SRH Berlin
- You get 50 Casky Tokens for early access to casky.ai
- Results published open access under CC-BY 4.0
📑 Table of contents
安装
npx @modelcontextprotocol/inspector python -m cve_mcp.server配置
{
"mcpServers": {
"cve-mcp": {
"command": "python",
"args": ["-m", "cve_mcp.server"],
"cwd": "/absolute/path/to/cve-mcp-server",
"env": {
"NVD_API_KEY": "your-key-here",
"GITHUB_TOKEN": "ghp_xxxxxxxxxxxxxxxxxxxx",
"ABUSEIPDB_KEY": "your-abuseipdb-key",
"GREYNOISE_API_KEY": "your-greynoise-key",
"SHODAN_KEY": "your-shodan-key"
}
}
}
}