Vulnrable MCP Server: Install & Setup

Install Vulnrable in Claude Code

Claude Code

claude mcp add --transport http vulnrable https://vulnrable.com/api/mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "vulnrable": {
      "url": "https://vulnrable.com/api/mcp"
    }
  }
}

Frequently asked questions

What does the Vulnrable MCP server do?

Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.

Is the Vulnrable MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does Vulnrable run locally or remotely?

Remote. Hosted by the provider. You connect with a URL, nothing to install.

How do I add Vulnrable to Claude Code?

Run: claude mcp add --transport http vulnrable https://vulnrable.com/api/mcp

More security & identity MCP servers

View all

Wafergraph

jasonpalmer1/wafergraph-mcp

Read-only MCP server for wafergraph.com's semiconductor & AI supply-chain data: 30 tools, no auth.

RemoteAccount needed

vuln-intel

rozetyp/vuln-intel-mcp

Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports

RemoteAccount needed

Watchtower

Mazeh18/watchtower-mcp

Sanctions screening, KYB, identifier validation, jurisdiction risk & secret scanning for AI agents

RemoteAccount needed

VPSnet

bacarrdy/vpsnet-mcp

Manage VPSnet servers, apps, private networks and Functions with authorized customer access.

RemoteAccount needed

Weav Customer Service

dubdubdubco/weav-site-mcp

Explore Weav customer service pricing, features, comparisons, signup, and demos. No auth required.

RemotePaid service

Vitalli

app.vitalli/mcp

Your own health records from Vora, Still, Stackwell and Joiva in your AI assistant (OAuth).

RemoteAccount needed