# Vulnrable (vulnrable.com)

Aggregates CVE, exploit and package advisory data from NVD, OSV and GitHub into a threat board with MCP dependency counts.

- Atlas card: https://inite.ai/en/atlas/vulnrable.com
- Site: https://vulnrable.com
- For: Developers and security reviewers choosing MCP servers to run inside AI agents, checking their dependencies and known vulnerabilities
- Categories: dev
- Use 0/100 · alive 100/100

## Used for

- compare third-party package counts across MCP servers
- browse recent CVEs, exploits and security news
- check packages against known vulnerability databases

## Price

Not read yet.

## For developers

- MCP server: com.vulnrable/vulnrable (namespace; open on 2026-10-21, 4 tools)
- Read 2026-10-21

## MCP server, measured daily

Server: https://vulnrable.com/api/mcp, checked every day since 2026-10-21 (6 checks).

- Answered: measuring, 6 daily checks so far
- Median first answer: 519 ms
- Sign-in: none
- Context its tool definitions take: about 470 tokens (4 tools)
- Tool definitions: B, 75/100
- Failing "params_described": 2 of 4 tools
- Failing "annotations": 4 of 4 tools
- Method: https://inite.ai/en/atlas/mcp/report

## Your data

- Certifications stated: none
- Read 2026-10-21

---

Source: INITE Atlas, https://inite.ai/en/atlas/vulnrable.com. JSON: https://inite.ai/api/atlas/vulnrable.com. MCP: https://inite.ai/api/mcp (atlas_lookup).