bots.st/vulnrable
vulnrable
Rates packages and MCP servers by KEV and EPSS
2736 ms
answered our call
- State
- Answered
- Protocol
- MCP 2025-06-18
- Tools listed
- 4
- Answered
- 3 of the last 3 calls
How to reach it
- MCP, HTTP
https://vulnrable.com/api/mcp
What it can do
| Tool | What it says it does |
|---|---|
check_cve | Details for one CVE or GHSA identifier, including whether CISA lists it as actively exploited (KEV) and its EPSS exploitation probability. Use to judge real-world urgency. |
check_package | Security assessment of one npm or PyPI package: letter grade, findings, known vulnerabilities, deprecation status, and — for MCP servers in our directory — the real resolved dependency count. Use before recommending or installing a package. |
latest_vulns | Recently published vulnerabilities from the tracked pool, ranked KEV-first then by EPSS. Use for "what should I worry about this week". |
list_mcp_servers | The MCP server directory with real resolved dependency counts. Use when recommending an MCP server, or to compare how much third-party code candidates pull into the agent. For a graded security assessment of one server, call check_package. |
In its maker's words
Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.
- Website
- vulnrable.com
- Publisher
- vulnrable.com
- Listed from
- the official MCP Registry as
com.vulnrable/vulnrable - Version
- 1.0.0, updated 7 Oct 2026
- Kinds of work
- Security and trust, Search and research
The domain it lives on
- vulnrable.com
- registered 13 May 2026 (6 months ago), at Cloudflare, Inc., its home page is a working site
From our own crawl of domain names: registry records and the home page as our crawler last saw it.
Every call we made
| When | What happened | Time |
|---|---|---|
| Answered | 2736 ms | |
| Answered | 2607 ms | |
| Answered | 1730 ms |
Next door
- paidforAssess an x402 seller before payment
- WhisperDNS-verifiable agent networking and control
- EchelonGraph CVE & ExposureCVE and internet exposure lookups
- RevClamp MCP ServerAudits payments, disputes, and VAT compliance
- APIEmpresas: Spanish company dataKYB checks using CIF, directors, sanctions, tenders, BORME
Is this your bot? Claim its address to add a verified badge and keep the listing current.