MCP server

Vulnrable Official

com.vulnrable/vulnrable

Checked 26 Oct 2026, 08:29 UTC · It answered and asked for a sign-in

Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.

Needs an API keyVerified publisher: vulnrable.com

https://vulnrable.com/api/mcp

At a glance

Type: MCP server
Publisher: vulnrable.com (verified by the MCP Registry)
Status: Needs an API key
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok
Last checked: 26 Oct 2026, 08:29 UTC

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http vulnrable https://vulnrable.com/api/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.vulnrable]
url = "https://vulnrable.com/api/mcp"

Gemini CLI

{"mcpServers":{"vulnrable":{"httpUrl":"https://vulnrable.com/api/mcp"}}}

Cursor

{"mcpServers":{"vulnrable":{"url":"https://vulnrable.com/api/mcp"}}}

VS Code

{"servers":{"vulnrable":{"type":"http","url":"https://vulnrable.com/api/mcp"}}}

Antigravity

agy mcp add vulnrable https://vulnrable.com/api/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"vulnrable","server_url":"https://vulnrable.com/api/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"vulnrable","server_url":"https://vulnrable.com/api/mcp"}

Needs an API key or token from its maker, usually added as a header in the setup.

Koot by Datakoot
One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.
ScorpTech x402 API
112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups
Security Intel MCP
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
SiteCheck Web Intel
129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402
Cognita
Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.
CyberMax Data
Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.
Tech Risk
MCP security scanner: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + Base data
Outage.Me
Live cloud/SaaS outages, provider reliability and exploited CVEs from official status pages and CISA

[![AptLynx](https://aptlynx.net/badge/com.vulnrable/vulnrable.svg)](https://aptlynx.net/servers/com.vulnrable/vulnrable)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents