Getting Started

CVSS.my.id provides two ways to calculate Common Vulnerability Scoring System (CVSS) scores:

1. Interactive Browser Calculator for full multi-group scoring (Base, Threat/Temporal, Environmental, and Supplemental).
2. MCP Server (cvss-calculator-mcp) for automated Base Score calculation inside AI coding agents and security triage pipelines.

Which Tool Should I Use?

Requirement	Recommended Tool	Supported Metric Groups
Interactive vulnerability triage with Threat, Temporal, Environmental, or Supplemental metrics	Full Browser Calculator	Base, Threat, Temporal, Environmental, Supplemental (v4.0, v3.1, v3.0, v2.0)
Exporting canonical vector strings or formatted score summaries	Full Browser Calculator	Full vector serialization across all metric groups
Automated Base Score calculation inside Codex, Claude Code, Cursor, or OpenCode	Local MCP (stdio)	Base Score only (v4.0, v3.1, v3.0, v2.0)
Zero-install MCP testing from a cloud workspace or browser-hosted agent	Remote MCP (HTTP)	Base Score only (5 requests/min/IP limit)

Quick Start: Full Browser Calculator

1. Open the calculator for your target CVSS version:
   • CVSS v4.0 Calculator
   • CVSS v3.1 Calculator
   • CVSS v3.0 Calculator
   • CVSS v2.0 Calculator
2. Select all required Base metrics. Until every mandatory Base metric is chosen, the score displays Incomplete rather than 0.0.
3. Optionally switch tabs to add Threat (v4.0), Temporal (v3.x/v2.0), Environmental, or Supplemental (v4.0) metrics.
4. Or paste an existing CVSS vector directly into the Inline Vector String input at the top of the calculator to populate the form and compute the score immediately.
5. Use Copy Vector or Copy Result once all required Base metrics are valid.

Quick Start: Local MCP Server (Recommended for Agents)

Install the standalone Go binary on Linux or macOS:

curl -fsSL https://get.cvss.my.id/install.sh | bash

Verify the binary is on your PATH:

cvss-calculator-mcp --version

Then register cvss-calculator-mcp in your AI client using our Client Setup Guides.