Overview
The MCP CVE Intelligence Server Lite is a streamlined Model Context Protocol (MCP) server designed for security professionals, penetration testers, and cybersecurity researchers who need essential vulnerability intelligence integrated into their AI workflows. This Lite edition focuses on core CVE features, aggregating data from multiple authoritative sources—NVD, MITRE CVE Records, and GitHub Security Advisories—and exposing them through MCP-compatible tooling. It also includes essential exploit discovery from sources such as Exploit-DB, GitHub PoCs, Metasploit, and PacketStorm, enabling pattern-based detection and rapid risk assessment. The server supports EPSS risk scoring, complete CVSS analysis (v4/v3/v2) with severity assessment, and CPE-based discovery to map vulnerabilities to products. It offers real-time trending analysis, professional reports in Markdown/JSON/summary, and performance optimizations like intelligent caching and retry logic. Security-first, type-safe, with input validation and sanitization, rate limiting, and health monitoring. The Lite edition provides a pragmatic foundation for security automation and AI-assisted research while remaining lightweight and maintainable.
Features
Multi-Source CVE Intelligence
Unified access to vulnerability data from NVD, MITRE CVE Records, and GitHub Security Advisories through a single MCP endpoint.
Essential Exploit Discovery
Pattern-based detection leveraging Exploit-DB, GitHub PoCs, Metasploit, and PacketStorm.
EPSS Risk Scoring
Environmental context-aware vulnerability prioritization with exploit probability and exposure factors.
Complete CVSS Support
Support for CVSS v4/v3/v2 metrics with automatic severity assessment.
CPE-Based Discovery
Product-level vulnerability identification using standardized CPE identifiers.
Trending Analysis
Real-time vulnerability trends based on severity, exploit activity, and community engagement.
Professional Reports
Generates vulnerability reports in Markdown, JSON, and summary formats with key findings.
Performance Optimized
Caching, retry logic, and optimized processing to minimize latency and API calls.
Who Is This For?
- Security professionals:Leverage essential CVE intelligence and risk scoring within AI-assisted workflows for analysis and decision-making.
- Penetration testers:Utilize exploit discovery and CVE analysis to identify and prioritize target vulnerabilities.
- Cybersecurity researchers:Research vulnerability trends, risk scoring, and comprehensive CVE data for security studies and experiments.
