https://cybertoolchain.io/tools/cve-mcp-server New releases and features in CVE MCP Server, tracked by The Cyber Toolchain. en Mon, 22 Jun 2026 16:40:25 GMT https://github.com/mukul975/cve-mcp-server/releases/tag/v0.2.0 https://github.com/mukul975/cve-mcp-server/releases/tag/v0.2.0 Mon, 22 Jun 2026 16:40:25 GMT CVE MCP Server v0.2.0 adds triage_cve orchestrator, VulnCheck fallback, SSVC decisions, and streamable-HTTP transport • Adds `triage_cve` tool as an orchestrator that fans out concurrent calls to NVD, EPSS, CISA KEV, and public PoC discovery to compute a composite risk score. • Introduces `depth` parameter (`quick`, `standard`, `deep`) for the `triage_cve` tool; `deep` mode emits an SSVC v2 gated decision (CISA Deployer model) with outcomes `Act`, `Attend`, or `Track`. • Adds automatic VulnCheck NVD++ fallback when NIST NVD is unreachable or throttled. • Implements CISA KEV hard override logic: CVEs listed in CISA KEV are scored as CRITICAL (score clamped ≥ 76). • Stamps `scoring_version` into the `triage_cve`, `calculate_risk_score`, and `health_check` responses. • Adds `MCP_TRANSPORT=http` environment variable to enable streamable-HTTP transport instead of the default stdio. • Registers new MCP Resources: `kev://catalog`, `epss://scores/{cve_id}`, and `manifest://tool-hash` (SHA-256 over registered tool surface). • Adds new MCP Prompts: `patch_decision`, `compare_and_prioritize`, and `dependency_triage`. • Expands the `health_check` endpoint to include scoring version, manifest hash, and configured-key status. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cve-mcp-server