nvd 3 tools

MCP server exposing 3 tools for nvd.

Endpoint

This URL is a JSON-RPC 2.0 endpoint over HTTP. Issue POST requests with a JSON-RPC body. Browsers and search crawlers land here on GET.

POST https://gateway.pipeworx.io/nvd/mcp
Content-Type: application/json

{"jsonrpc":"2.0","id":1,"method":"tools/list"}

search_cves — Search NVD for CVE vulnerabilities by product or component name. Returns CVE ID, description, severity, and CVSS score. Search terms are matched against CVE description text and EVERY word must appear, so pass the product name ("OpenSSL", "log4j", "nginx") optionally with a technical term ("buffer overflow") — not a plain-English question. Use when researching security threats or checking if a known vulnerability affects your systems.
get_cve — Get full details for a specific CVE (e.g., "CVE-2021-44228"). Returns description, severity, CVSS score, affected products, and remediation info. Use when you need comprehensive vulnerability analysis.
recent_cves — Get CVEs published within a date range (use ISO 8601 format, e.g., "2024-01-01T00:00:00.000Z"). Returns CVE IDs, descriptions, and severity. Use to track newly disclosed vulnerabilities.

Code samples (curl / TypeScript / one-click client install), schemas, and the live playground are on the pack page:
https://pipeworx.io/packs/nvd/

Pipeworx is an open MCP gateway connecting AI agents to live data. pipeworx.io