NVD search API

CVE records in the NVD, the US vulnerability database, matching a keyword, with CVSS score and severity.

Ask your agent

“Call nvd/search with query log4j and summarize what comes back.”

Works in any MCP client connected to https://data.openkrill.app/mcp. Install in one line.

Path: nvd/search
MCP tool: call_endpoint
Credits: 1
Cache: 2 min

Parameters

querystring, required	Keyword, such as log4j
limitinteger, optional	1-25, default 10

Response

data.resources[] uses the same keys as every other platform: author, engagement, metadata, with NVD-only fields under extras. A failed upstream call is never billed.

More NVD tools

record

Same search call on other platforms

MCP tool call

{
  "name": "call_endpoint",
  "arguments": {
    "path": "nvd/search",
    "params": {
      "query": "log4j"
    }
  }
}

curl

curl "https://data.openkrill.app/v1/nvd/search?query=log4j" \
  -H "x-api-key: YOUR_API_KEY"

Response

{
  "success": true,
  "platform": "nvd",
  "endpoint": "nvd/search",
  "data": {
    "resources": [
      { "id": …, "title": …, "text": …, "url": …,
        "author": {…}, "engagement": {…},
        "metadata": {…}, "extras": {…} }
    ]
  },
  "credits_used": 1,
  "cached": false
}