English Français العربية

com.vulnrable/vulnrable

Official registry Security

Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.

Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http vulnrable 'https://vulnrable.com/api/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "vulnrable": {
            "type": "http",
            "url": "https://vulnrable.com/api/mcp"
        }
    }
}

Frequently asked questions

What is com.vulnrable/vulnrable?

Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.

How do I install com.vulnrable/vulnrable?

It runs as a remote server. In Claude Code: claude mcp add --transport http vulnrable 'https://vulnrable.com/api/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does com.vulnrable/vulnrable need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Who maintains com.vulnrable/vulnrable?

It is published by com.vulnrable. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.