# Cyanheads Nist Nvd MCP server

Source: https://glimind.com/server/mcp-registry%2Fio.github.cyanheads%2Fnist-nvd-mcp-server
Registry id: `mcp-registry/io.github.cyanheads/nist-nvd-mcp-server`
Status: live (checked 2026-10-27T00:23:51.392Z)

## Verdict

Cyanheads Nist Nvd MCP server answered 99.81% of Glimind's liveness checks over 30 days, better than 24% of MCP servers, with 572 ms median handshake and 5 outages in 90 days. Its agent-readiness grade is A (99/100) across 5 tools, costing an agent about 3,091 tokens to load. Checked every few minutes; no tool is ever called.

## Measurements (30 days)

| Metric | Value | Better than |
|---|---|---|
| Uptime, 30 days | 99.81% | 24% of MCP servers |
| Median handshake latency | 572 ms | 43% of MCP servers |
| p95 handshake latency | 2787 ms | — |
| Checks in 30 days | 4,990 | — |
| Outages, 90 days | 5 | — |
| Median recovery | 7 min | — |
| Agent-readiness score | 99/100 (A) | 93% of MCP servers |
| Tools | 5 | — |
| Tool-list size for an agent | ~3,091 tokens | 45% of MCP servers |
| Days observed | 29 | — |

## Install

```json
{
  "mcpServers": {
    "cyanheads-nist-nvd-mcp-server": {
      "type": "http",
      "url": "https://nist-nvd.caseyjhand.com/mcp"
    }
  }
}
```

Claude Code:

```sh
claude mcp add --transport http cyanheads-nist-nvd-mcp-server https://nist-nvd.caseyjhand.com/mcp
```

## Tools (5)

- `nvd_audit_cpe`: Find all CVEs affecting a specific product and version using CPE (Common Platform Enumeration). Requires either an exact CPE name (cpeName) or a partial match s
- `nvd_get_cve`: Fetch one or more CVEs by ID from the NIST National Vulnerability Database. Returns CVSS scores across all available versions (v2.0, v3.0, v3.1, v4.0), CWE weak
- `nvd_get_cve_history`: Retrieve the change history for a single CVE — CVSS score revisions, reference additions, status transitions (e.g., "Received" → "Analyzed"), and CPE configurat
- `nvd_search_cpes`: Search the NVD CPE (Common Platform Enumeration) dictionary by product keyword or partial match string. Returns CPE names, human-readable titles, and deprecatio
- `nvd_search_cves`: Search CVEs by keyword, severity, CWE, date range, or CISA KEV status. The primary discovery tool for vulnerability surveillance and triage workflows. pubDays a

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.