v0.1.0 — Initial Release

cve-mcp v0.1.0

23-tool MCP server for CVE & vulnerability intelligence.

Features

• NVD — Search, get details, recent CVEs, product lookup (4 tools)
• EPSS — Exploitation probability scores and top CVEs (2 tools)
• CISA KEV — Known exploited vulnerabilities check, search, recent (3 tools)
• GitHub Advisory — Security advisory search and details (2 tools)
• OSV — Package vulnerability query, details, batch (3 tools)
• Exploit — Public PoC search via GitHub repos (1 tool)
• CWE — Weakness lookup by ID or keyword (1 tool)
• CVSS — v3.1 vector parser with score calculation (1 tool)
• Meta — Full enrichment, risk prioritization, trending, compare, sources, report (6 tools)

Data Sources

Source	Auth
NVD	Optional NVD_API_KEY
EPSS	None
CISA KEV	None
GitHub Advisory	Optional GITHUB_TOKEN
OSV	None

Quick Start

npx cve-mcp

Risk Score Formula

Risk Score = CVSS Base × EPSS Score × KEV Multiplier (2× if in KEV)

---

Full Changelog: https://github.com/badchars/cve-mcp/commits/v0.1.0