Vulnrable

Connect Remote server

claude mcp add --transport http vulnrable https://vulnrable.com/api/mcp

{
  "mcpServers": {
    "vulnrable": {
      "url": "https://vulnrable.com/api/mcp"
    }
  }
}

{
  "servers": {
    "vulnrable": {
      "type": "http",
      "url": "https://vulnrable.com/api/mcp"
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://vulnrable.com/api/mcp

Tools 4 found in our last check

• check_package

  Security assessment of one npm or PyPI package: letter grade, findings, known vulnerabilities, deprecation status, and — for MCP servers in our directory — the real resolved dependency count. Use before recommending or installing a package.

• list_mcp_servers

  The MCP server directory with real resolved dependency counts. Use when recommending an MCP server, or to compare how much third-party code candidates pull into the agent. For a graded security assessment of one server, call check_package.

• check_cve

  Details for one CVE or GHSA identifier, including whether CISA lists it as actively exploited (KEV) and its EPSS exploitation probability. Use to judge real-world urgency.

• latest_vulns

  Recently published vulnerabilities from the tracked pool, ranked KEV-first then by EPSS. Use for "what should I worry about this week".

Details

More developer tools servers See all

• AGILEX Docs

  Official AGILEX robotics product docs: manuals, CAN protocol, firmware, FAQ. Read-only.

• Echoo public catalog

  Read-only Echoo product facts, pricing, documentation and published writing skills.

• 99tests

  Order human-run real-device app tests from your coding agent; verified bugs return as fix prompts.

• LimitReceipts by aiw3b

  Find the AI coding/app-builder plan that fits your usage: limits, prices and plan-fit picks.

• Candor UI docs

  Candor UI docs and component suggestions. Read-only, no key, never serves paid source.

• MoneyTools Tools

  Call for a cheap read-only utility: 100+ tools; free daily tier; not charged on failure