# CMDB CVE

> Use this tool when you need to identify and manage vulnerabilities in your asset inventory, and automate the process of matching CVEs to vulnerable assets. It solves problems related to asset security and compliance by providing real-time CVE data and AI-driven vulnerability matching. The tool takes in asset data and CVE filters as inputs, and outputs structured email reports and vulnerability records.

Canonical page: https://skillsregistry.net/skills/r00tkit77-cmdb-cve  
JSON: https://api.skillsregistry.net/v1/skills/r00tkit77-cmdb-cve

## Description

CMDB CVE is a vulnerability intelligence MCP server that combines asset inventory management with real-time CVE data from NIST's National Vulnerability Database. It exposes five tools for listing assets, exporting asset data, retrieving CVE records, fetching the latest vulnerabilities with filters, and sending structured email vulnerability reports. The server uses AI reasoning to match CVEs to vulnerable assets in the inventory.

## Trust

- **Trust score (0–1):** 0.95
- **Verification tier:** verified
- **Last scanned:** 2026-09-19

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** mcp-remote
- **Runtime environment:** api
- **Category:** database
- **Updated:** 2026-09-19

## Source

- **Source listing:** [PulseMCP](https://www.pulsemcp.com/servers/r00tkit77-cmdb-cve)
- **Repository:** <https://github.com/r00tkit77/cmdb_nvd_mcp_server>

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "r00tkit77-cmdb-cve"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/r00tkit77-cmdb-cve` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/r00tkit77-cmdb-cve/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt