vulnrable

by FastDrop

MCP MCP VERIFIED Verified 3 days ago Registry import free

Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.

Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS. Official MCP Registry: com.vulnrable/vulnrable@1.0.0. Remote endpoint: https://vulnrable.com/api/mcp

Problem it solves

Discoverable MCP server listed in the official MCP Registry.

How it's different

Remote MCP endpoint ingested from the official registry and probed by FastDrop.

Ingested from the official MCP Registry

FastDrop pulled this entry from the official MCP Registry as com.vulnrable/vulnrable and probed the endpoint. The maker did not submit it, so the outbound link is not endorsed and the description is not theirs.

If this is your server, claim the listing to edit it and take ownership. The registry index lists everything else still awaiting a probe.

Claim this listing

Tools this endpoint exposes

Read directly from the endpoint on 7 Oct 2026. Not supplied by the maker.

check_package
Security assessment of one npm or PyPI package: letter grade, findings, known vulnerabilities, deprecation status, and — for MCP servers in our directory — the real resolved dependency count. Use befo
list_mcp_servers
The MCP server directory with real resolved dependency counts. Use when recommending an MCP server, or to compare how much third-party code candidates pull into the agent. For a graded security assess
check_cve
Details for one CVE or GHSA identifier, including whether CISA lists it as actively exploited (KEV) and its EPSS exploitation probability. Use to judge real-world urgency.
latest_vulns
Recently published vulnerabilities from the tracked pool, ranked KEV-first then by EPSS. Use for "what should I worry about this week".