NVD Vulnerabilities

liveSecurity

Search CVE vulnerabilities, fetch CVE details, and browse recent disclosures from the NIST National Vulnerability Database

3tools
0msauth
free tier50 calls/day

Tools

search_cvesrequired: query

Search NVD for CVE vulnerabilities by product or component name. Returns CVE ID, description, severity, and CVSS score. Search terms are matched against CVE description text and EVERY word must appear

Parameters
NameTypeDescription
queryreqstringKeyword(s) to search in CVE descriptions
limitoptnumberMaximum number of results to return (default 10, max 2000)
▶Try it
get_cverequired: cve_id

Get full details for a specific CVE (e.g., "CVE-2021-44228"). Returns description, severity, CVSS score, affected products, and remediation info. Use when you need comprehensive vulnerability analysis

Parameters
NameTypeDescription
cve_idreqstringCVE identifier, e.g. "CVE-2021-44228"
▶Try it
recent_cvesrequired: start, end

Get CVEs published within a date range (use ISO 8601 format, e.g., "2024-01-01T00:00:00.000Z"). Returns CVE IDs, descriptions, and severity. Use to track newly disclosed vulnerabilities.

Parameters
NameTypeDescription
startreqstringStart date in ISO 8601 format (e.g. "2024-01-01T00:00:00.000Z")
endreqstringEnd date in ISO 8601 format (e.g. "2024-01-31T23:59:59.000Z")
limitoptnumberMaximum number of results to return (default 10, max 2000)
▶Try it

Test with curl

The gateway speaks JSON-RPC 2.0 over HTTP POST. You can test any pack directly from the terminal.

List available tools
bash
curl -X POST https://gateway.pipeworx.io/nvd/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'
Call a tool
bash
curl -X POST https://gateway.pipeworx.io/nvd/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"search_cves","arguments":{"query": "hello"}}}'

Use with the SDK

Install @pipeworx/sdk to call tools from any TypeScript/Node project.

TypeScript
import { Pipeworx } from '@pipeworx/sdk';
const px = new Pipeworx();
const result = await px.call("search_cves", {"query":"example"});
ask_pipeworx
// Or ask in plain English:
const answer = await px.ask("search cve vulnerabilities, fetch cve details, and browse recent disclosures from the nist national vulnerability database");