{
  "markdown": "# @weiseer/cve-cache-mcp\n\n> Recent CVE + GHSA cache as a stdio MCP server.\n\nProbe **P-005** by [weiseer](https://github.com/weiseer).\n\n## What it does\n\nCached, structured snapshot of recent CVE + GitHub Security Advisory records — for AI agents auditing dependencies or screening new packages.\n\nYour agent can:\n- `lookup_cve` — full record for one CVE/GHSA ID\n- `find_for_package` — all CVEs affecting a package by ecosystem (npm/PyPI/Cargo/Maven/Go)\n- `list_recent_critical` — recent high-severity CVEs (default: 7-day, CVSS ≥ 7)\n- `severity_summary` — counts by severity bucket\n\n## Why use this instead of your agent querying NVD itself\n\n| | Agent DIY | cve-cache |\n|---|---|---|\n| Source query | NVD JSON feeds + GHSA GraphQL | 1 MCP call |\n| Token cost (NVD records are large) | $0.05-0.20 | $0 free / $0.00005 paid |\n| Latency | 2-10 seconds | <100ms |\n| Cross-ecosystem normalization | Per-source schema | Pre-normalized |\n\n## Install\n\n```bash\nnpm install -g @weiseer/cve-cache-mcp\n```\n\n## Use with Claude Desktop / Cursor / Cline / Continue / Windsurf\n\n```json\n{\n  \"mcpServers\": {\n    \"cve-cache\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@weiseer/cve-cache-mcp\"]\n    }\n  }\n}\n```\n\n## License\n\nApache-2.0. Catalog data: derived from public CVE/NVD/GHSA feeds (CC0/public domain).\n",
  "bytes": 1293,
  "sha": "ef7fdda3bb1a2ffc0d30a3cf4fdec7e48b91a18b590334a9858c7c9f586eb922",
  "repo_slug": "weiseer/cve-cache-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_weiseer_cve_cache_7009adae/readme"
}