now.vulnerable/mcp

up checked 2026-11-11T07:39:19.416Z

Unclaimed · Unverified

Publisher-provided title

vulnerable.now

Publisher-provided description

Free CVE lookups, package checks and patch priorities from public sources. No account or API key.

Summary by lookupd

Looks up known CVEs, package and product vulnerabilities, and patch priorities across multiple advisory sources, with no account required.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http mcp https://vulnerable.now/mcp

Codex, remote (streamable-http)

codex mcp add mcp --url https://vulnerable.now/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://vulnerable.now/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Publisher-provided text

get_vulnerability Get the merged entry for one or more IDs: CVE, GitHub advisory (GHSA), EUVD, or an OSV ID such as PYSEC, GO or RUSTSEC. Returns the description, CVSS, CISA KEV
get_poc List the public exploit code and proofs of concept the sources link to one vulnerability: Metasploit exploit modules, Exploit-DB entries, references NVD or the
search Search the whole catalog by words: product, vendor, package, CVE ID, common vulnerability name, research metadata or description text. Best match first by defau
get_package Every known vulnerability in one open source package, most urgent first, with the affected ranges and fixed versions published for that package. Give a version
get_product Every known vulnerability in one vendor product, such as an operating system, browser, server, CMS or appliance, most urgent first, with the affected versions a
list_feed List vulnerabilities newest first (KEV listings by date added when kev is set). Filter by severity, CISA KEV, exploitation, public exploit code, fix availabilit
top_priority What to patch first: the vulnerabilities with the highest priority score (exploitation, EPSS, CVSS, automatability) among those with activity in a time window,
check_stack Find known vulnerabilities in what a project or site runs, ranked by what to fix first. Send exact package versions, the raw content of a lockfile (package-lock

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/now.vulnerable/mcp.svg)](https://lookupd.com/servers/now.vulnerable/mcp)