Vulnrable MCP Server
com.vulnrable/vulnrablev1.0.0
Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.
context tax
queued
security
queued
cold start
queued
freshness
Active3d ago
Install Vulnrable MCP server
Install in Claude Code
claude mcp add --transport http vulnrable https://vulnrable.com/api/mcpInstall in Cursor
{
"mcpServers": {
"vulnrable": {
"url": "https://vulnrable.com/api/mcp"
}
}
}Install in Claude Desktop
{
"mcpServers": {
"vulnrable": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://vulnrable.com/api/mcp"
]
}
}
}Or add it as a custom connector under Settings → Connectors. The config above bridges via mcp-remote.
Install in VS Code
{
"servers": {
"vulnrable": {
"type": "http",
"url": "https://vulnrable.com/api/mcp"
}
}
}Install in Windsurf
{
"mcpServers": {
"vulnrable": {
"serverUrl": "https://vulnrable.com/api/mcp"
}
}
}Remote endpoints
- streamable-http
https://vulnrable.com/api/mcp
Freshness
Active — last maintenance signal 3d ago. The newest of the signals below sets the band.
Last commit (default branch)
no data · GitHub
Latest release
no data · GitHub
Package published
no data · npm/PyPI
Registry entry updated
2026-10-07 · 3d ago · official registry · v1.0.0
FAQ
›How do I install the Vulnrable MCP server in Claude Code?
Run: claude mcp add --transport http vulnrable https://vulnrable.com/api/mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does Vulnrable require an API key?
No required environment variables are declared in its published metadata.
›Can I use Vulnrable as a remote (hosted) MCP server?
Yes. It is a hosted MCP server; connect to its URL with any client that supports remote MCP.
›Is Vulnrable in the official MCP registry?
Yes, as com.vulnrable/vulnrable.
Alternatives to Vulnrable
Other security MCP servers.