Unstable preview. Pages, data and API fields can change or break without notice, so please don't rely on this for anything critical yet. See what has changed.
Agent Service Directory
Menu

vulnerable.now

MCP server · vulnerable.now · found in a public list · checked since 2026-11-10

Live, handshake completed · latest check

As JSON

Finds known CVEs in packages, lockfiles and stacks, and ranks fixes by urgency.

Our summary of what its own text says it does: automated, not reviewed by a person (placement-ai/7). What this means

Placed in Scan code and dependencies: Scan packages, dependency lists, repositories and config files for vulnerabilities, malware and leaked secrets.

https://vulnerable.now/mcp MCP endpoint (Streamable HTTP)

The name is the registry's label, not ours. Not reviewed by a person.

Our checks

An unpaid request daily, from eastern North America

Last 1 checks, oldest to newest; room for 29 more

1 passed, 0 failed, 29 not run.

Passed, 30 daysshort history1 of 1 run
Checks missed0in 30 days
Response, latest257 mswhole handshake
Scheduledailyset by usage; rule below
Checked since2026-11-10under 1 day
Freshnessfreshagainst its schedule

Checked daily. Daily: 5 to 99 payers, and every new service until it has been probed 3 times.

Details

Tools listed by the server

check_stackget_packageget_productget_vulnerabilitylist_feedsearchtop_priority

Tools
7
This list since
2026-11-10
First listed to us
2026-11-10
List changes, 90 days
0

Names as the server reported them at our latest completed handshake (mcp-handshake/2); a listed tool is not a tested one. Definitions

Access

Our latest check
Nothing asked
Stated
not stated
Payment model
not known
Currency
not known

"Nothing asked" describes one plain request, not every operation. Statements are claims, not our measurements. Definitions

Interface it declares

Protocol
MCP 2025-06-18
Capabilities
promptstools
Transports
streamable-http

As its initialize reply stated it at our check on (mcp-handshake/2): a claim, not tested. Definitions

Calls it declares

  • get_vulnerability id ids → vulnerability vulnerabilities missing error
  • search q* severity kev exploited public_exploit fix_available ecosystem vendor product package tech since until modified_since sort → exact total vulnerabilities next_cursor error
  • get_package ecosystem* name* version only_affected sort limit cursor → package total counts version matching
  • get_product product* vendor version only_affected sort limit cursor → technology total counts version matching
  • list_feed severity kev exploited public_exploit fix_available ecosystem vendor product package tech since until modified_since query limit → vulnerabilities next_cursor error
  • top_priority window ecosystem vendor product kev limit → window vulnerabilities error
  • check_stack packages file technologies → checkedAt packages vulnerable complete fix_first

From the tool list it returned to our check (request-shape/2). * marks a required parameter; after → the fields it says it returns. What it declares, not that a call works.

Listing

In the capability tree: Identity, security and compliance / Security / Scan code and dependencies (primary); Identity, security and compliance / Security / Look up vulnerabilities and advisories. Placed by three checks by a small AI model: placed, found blind from its tasks, and verified against its own text (placement-ai/7, tree/3) on 2026-11-10. Wrong place? Tell us.

In the directory: meets our listing criteria (listing-criteria/6): ✓ says what it does; ✓ its latest check passed.

Recent probes

WhenResultTime to headers

cloudflare:MIA		 Live, handshake completed HTTP 200 257 ms

What these figures do not show

  • A passing check means the server completed the MCP handshake with us (initialize, then tools/list, with no credentials; mcp-handshake/2) or asked for credentials first (HTTP 401). It does not show that the server's tools work or what they return. Tool names are as the server listed them.
  • Listed in the Official MCP Registry; this data comes from the Official MCP Registry. Its listing's description is not republished.
  • Limited evidence: monitored for under 1 day (less than 30).

Something wrong here?

Operate this service and want it reviewed, corrected or removed? Email hello@agentservicedirectory.com or use the opt-out page. A wrong place in the tree? Tell us.

Machine-readable: /api/v1/services/cand_364ad7b704bb114b