Security

Data source: NIST NVD 2.0 API (nvd.nist.gov)

MCP MCP Protocol

Endpoint https://context.gnist.ai/mcp/nvd/

nobloat — strip report_feedback tool URL-based auth (for clients without header support)

claude_desktop_config.json

{
  "mcpServers": {
    "gnist-nvd": {
      "url": "https://context.gnist.ai/mcp/nvd/",
      "headers": {
        "Gnist-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Shell

curl -X POST "https://context.gnist.ai/mcp/nvd/" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "Gnist-API-Key: YOUR_API_KEY" \
  -d '{"jsonrpc": "2.0", "method": "tools/call", "id": 1, "params": {"name": "get_cve", "arguments": {"cve_id": "example"}}}'

API REST API

API Root https://context.gnist.ai/rest/nvd/

4 endpoints available:

GET /rest/nvd/search_cves
GET /rest/nvd/get_cve
GET /rest/nvd/get_cve_history
GET /rest/nvd/report_feedback

Shell

curl "https://context.gnist.ai/rest/nvd/get_cve?cve_id=example" \
  -H "Gnist-API-Key: YOUR_API_KEY"

Python

import httpx

resp = httpx.get(
    "https://context.gnist.ai/rest/nvd/get_cve",
    headers={"Gnist-API-Key": "YOUR_API_KEY"},
    params={
        "cve_id": "example"
},
)
print(resp.json())

OpenAPI Spec · Full API Docs

CLI Command Line

Command gc nvd

CLI documentation will be available when the GnistAI SDK is published.

Install

pip install gnistai

Available Tools (4)

search_cves

Search the NIST National Vulnerability Database for CVEs.

Parameter	Type	Required	Description
`keyword`	`any`	optional	Keyword to search CVE descriptions (e.g. "buffer overflow", "SQL injection").
`cve_id`	`any`	optional	Specific CVE ID (e.g. "CVE-2024-0001"). Returns exact match.
`severity`	`any`	optional	CVSS v3 severity: "LOW", "MEDIUM", "HIGH", or "CRITICAL".
`pub_start_date`	`any`	optional	Start of publication date range (ISO 8601, e.g. "2024-01-01T00:00:00.000").
`pub_end_date`	`any`	optional	End of publication date range (ISO 8601, e.g. "2024-12-31T23:59:59.999").
`cpe_name`	`any`	optional	CPE match string for affected product (e.g. "cpe:2.3:a:apache:log4j::::::::").
`results_per_page`	`integer`	optional	Maximum results to return (1-50, default 10). (default: 10)