protogrid
Sign inAdd to your agent

Search / now.vulnerable/mcp

vulnerable.now

R0· no sign-in

Free CVE lookups, package checks and patch priorities from public sources. No account or API key.

v0.4.0 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality89new
Trust82of 100
Uptime, 30 days94%
Latency p50297 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "vulnerable": {
      "type": "http",
      "url": "https://vulnerable.now/mcp"
    }
  }
}
claude mcp add --transport http vulnerable https://vulnerable.now/mcp
[mcp_servers.vulnerable]
url = "https://vulnerable.now/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "vulnerable": {
      "type": "remote",
      "url": "https://vulnerable.now/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "vulnerable": {
      "type": "http",
      "url": "https://vulnerable.now/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=vulnerable&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vdnVsbmVyYWJsZS5ub3cvbWNwIn0%3D"
}
{
  "servers": {
    "vulnerable": {
      "type": "http",
      "url": "https://vulnerable.now/mcp"
    }
  }
}
{
  "mcpServers": {
    "vulnerable": {
      "httpUrl": "https://vulnerable.now/mcp"
    }
  }
}
extensions:
  "vulnerable":
    enabled: true
    name: "vulnerable"
    type: streamable_http
    uri: "https://vulnerable.now/mcp"
    timeout: 300

Quality 89 / 100new

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations9 of 9 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 2,989 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
  • pass
    tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pull, stability.new_linkstool history recorded for 3 of the 7 days needed
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

9 tools, about 2,989 tokens to load them all · tool set 70750a89a2a3 · tools last changed 2026-11-14 · checked 2026-11-14 07:03 UTC

Tool changes

  • get_overviewadded

    Get the stored AI-written overview of one CVE: one paragraph on what the flaw is, what it affects, what an attacker can do, whether it is exploited and how to fix it, written by Hinoki Offensive One from the entry's source data. Overviews are written only when someone opens the CVE page on vulnerable.now, so this tool reads and never writes one. status says whether the paragraph is ready, stale (the sources changed since), missing or still being written. AI text can be wrong; check get_vulnerability and the sources. The same JSON as GET /api/v1/entries/{id}/overview.

  • get_pocadded

    List the public exploit code and proofs of concept the sources link to one vulnerability: Metasploit exploit modules, Exploit-DB entries, references NVD or the CNA tagged as exploits (broken links left out), and GitHub PoC repositories (most stars first). Links only; nothing is downloaded or run. The same JSON as GET /api/v1/entries/{id}/pocs. GitHub PoCs and tagged references are unverified third-party code, and stars are popularity, not review.

  • list_feedchangedinput schema
  • searchchangeddescription, input schema
    before

    Search the whole catalog by words: product, vendor, package, CVE ID or description text. Best match first by default. Each result says which fields matched. When nothing matches, the reply suggests a broader query.

    after · 87% of words in common

    Search the whole catalog by words: product, vendor, package, CVE ID, common vulnerability name, research metadata or description text. Best match first by default. Each result says which fields matched. When nothing matches, the reply suggests a broader query.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 82 / 100

no-repository
provenance55
liveness98
freshness100
hygiene80

+dns-namespace +website +reachable +uptime-94% +updated-3d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://vulnerable.now/mcp streamable-httpnoneyes94%297 ms2025-11-252026-11-14

Tools (9)

check_stackread-onlyFind known vulnerabilities in what a project or site runs, ranked by what to fix first. Send exact package versions, the raw content of a lockfile (package-lock.json, poetry.lock, go.sum and others), a CycloneDX or SPDX SBOM, a Wappalyzer export, or detected technologies such as nginx 1.18.0. Returns each finding with severity, exploitation, priority and fixed versions.
get_overviewread-onlyGet the stored AI-written overview of one CVE: one paragraph on what the flaw is, what it affects, what an attacker can do, whether it is exploited and how to fix it, written by Hinoki Offensive One from the entry's source data. Overviews are written only when someone opens the CVE page on vulnerable.now, so this tool reads and never writes one. status says whether the paragraph is ready, stale (the sources changed since), missing or still being written. AI text can be wrong; check get_vulnerability and the sources. The same JSON as GET /api/v1/entries/{id}/overview.
get_packageread-onlyEvery known vulnerability in one open source package, most urgent first, with the affected ranges and fixed versions published for that package. Give a version to learn which advisories affect it and the lowest upgrade that leaves every affecting range.
get_pocread-onlyList the public exploit code and proofs of concept the sources link to one vulnerability: Metasploit exploit modules, Exploit-DB entries, references NVD or the CNA tagged as exploits (broken links left out), and GitHub PoC repositories (most stars first). Links only; nothing is downloaded or run. The same JSON as GET /api/v1/entries/{id}/pocs. GitHub PoCs and tagged references are unverified third-party code, and stars are popularity, not review.
get_productread-onlyEvery known vulnerability in one vendor product, such as an operating system, browser, server, CMS or appliance, most urgent first, with the affected versions and fixes. The vendor is optional: with only a product name, a clear match is answered directly and otherwise the candidates are listed. Give a version to learn which entries affect it and the lowest upgrade that clears them.
get_vulnerabilityread-onlyGet the merged entry for one or more IDs: CVE, GitHub advisory (GHSA), EUVD, or an OSV ID such as PYSEC, GO or RUSTSEC. Returns the description, CVSS, CISA KEV status, EPSS, public exploits, affected packages, fixed versions, priority and source links.
list_feedread-onlyList vulnerabilities newest first (KEV listings by date added when kev is set). Filter by severity, CISA KEV, exploitation, public exploit code, fix availability, ecosystem, vendor, product, text and dates. Use modified_since to pick up changes since a previous run.
searchread-onlySearch the whole catalog by words: product, vendor, package, CVE ID, common vulnerability name, research metadata or description text. Best match first by default. Each result says which fields matched. When nothing matches, the reply suggests a broader query.
top_priorityread-onlyWhat to patch first: the vulnerabilities with the highest priority score (exploitation, EPSS, CVSS, automatability) among those with activity in a time window, optionally narrowed to an ecosystem, vendor or product.

Schemas: list_tools.

Similar MCP servers

  • VulnTrackerR1quality 84
    io.vulntracker/mcp

    CVEs, affected versions and fix versions for your dependencies, from an affected-version ledger.

  • Keep Me SecureR0quality 86
    io.github.robertkeus/keep-me-secure-mcp

    Tells your coding agent whether your installed packages need patching, with advice on what to do.

  • osv-advisory-mcp-serverR0quality 77
    io.github.cyanheads/osv-advisory-mcp-server

    Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

  • vulners-mcpR0quality 80
    io.github.vulnersCom/vulners-mcp

    MCP server for the Vulners.com API

  • Security MCPL0
    io.github.pratham-jain33/security-mcp

    Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses

  • osv-mcpL0
    io.github.mrfentmen/osv-mcp

    MCP server for OSV open source vulnerability data and package security checks.

Official server.json
{
  "name": "now.vulnerable/mcp",
  "icons": [
    {
      "src": "https://vulnerable.now/icon-512.png",
      "sizes": [
        "512x512"
      ],
      "mimeType": "image/png"
    }
  ],
  "title": "vulnerable.now",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://vulnerable.now/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.4.0",
  "websiteUrl": "https://vulnerable.now",
  "description": "Free CVE lookups, package checks and patch priorities from public sources. No account or API key."
}