v0.2.0 — 41 Tools, 11 Data Sources

What's New

cve-mcp expands from 23 to 41 vulnerability intelligence tools across 11 data sources.

New Providers (9)

Provider	Tools	Auth
Shodan CVEDB/InternetDB	shodan_cve, shodan_product, shodan_ip_vulns	None
VulnCheck	vulncheck_kev, vulncheck_cpe, vulncheck_purl	Optional
Vulners	vulners_lookup, vulners_search	Optional
Nuclei Templates	nuclei_check	None
Metasploit	msf_check	None
NVD CPE	cpe_search, cpe_match	Optional
CIRCL	circl_cve	None
AttackerKB	attackerkb_assess	Optional
MITRE ATT&CK	cve_to_attack	None

Enhanced Existing Tools

• CWE — 3 new tools (cwe_get, cwe_hierarchy, cwe_top25) backed by MITRE CWE REST API with static fallback
• CVSS — cvss_parse now supports both v3.1 and v4.0 vectors (auto-detects version)
• Enrichment — cve_enrich queries 8 sources in parallel (was 5), adds Shodan + Nuclei + Metasploit signals
• Risk Score — New exploit multiplier: CVSS × EPSS × KEV × Exploit (1.5x when Nuclei/MSF module exists)
• Source Check — cve_list_sources now monitors 11 sources

New Environment Variables

VULNCHECK_API_KEY    # Optional. VulnCheck extended KEV, CPE, PURL search
VULNERS_API_KEY      # Optional. Vulners vulnerability search (200+ sources)
ATTACKERKB_API_KEY   # Optional. AttackerKB community assessments

Install

npx cve-mcp

Full Changelog: https://github.com/badchars/cve-mcp/blob/main/CHANGELOG.md