NVD Vulnerabilities

liveSecurity

Search CVE vulnerabilities, fetch CVE details, and browse recent disclosures from the NIST National Vulnerability Database

3tools
0msauth
free tier50 calls/day

Tools

search_cvesrequired: query

Search CVE vulnerabilities by keyword. Returns CVE ID, description, severity, and CVSS score.

Parameters
NameTypeDescription
queryreqstringKeyword(s) to search in CVE descriptions
limitoptnumberMaximum number of results to return (default 10, max 2000)
Try it
get_cverequired: cve_id

Fetch a specific CVE by its ID (e.g. "CVE-2021-44228"). Returns full details including description, severity, and affected products.

Parameters
NameTypeDescription
cve_idreqstringCVE identifier, e.g. "CVE-2021-44228"
Try it
recent_cvesrequired: start, end

Fetch CVEs published within a date range. Dates must be ISO 8601 format with timezone (e.g. "2024-01-01T00:00:00.000Z").

Parameters
NameTypeDescription
startreqstringStart date in ISO 8601 format (e.g. "2024-01-01T00:00:00.000Z")
endreqstringEnd date in ISO 8601 format (e.g. "2024-01-31T23:59:59.000Z")
limitoptnumberMaximum number of results to return (default 10, max 2000)
Try it

Test with curl

The gateway speaks JSON-RPC 2.0 over HTTP POST. You can test any pack directly from the terminal.

List available tools
bash
curl -X POST https://gateway.pipeworx.io/nvd/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'
Call a tool
bash
curl -X POST https://gateway.pipeworx.io/nvd/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"search_cves","arguments":{"query": "hello"}}}'

Use with the SDK

Install @pipeworx/sdk to call tools from any TypeScript/Node project.

TypeScript
import { Pipeworx } from '@pipeworx/sdk';
const px = new Pipeworx();
const result = await px.call("search_cves", {"query":"example"});
ask_pipeworx
// Or ask in plain English:
const answer = await px.ask("search cve vulnerabilities, fetch cve details, and browse recent disclosures from the nist national vulnerability database");