Vulners MCP is answering right now. Last checked 12 min ago. 140 installs a week from pypi. It exposes 7 tools. Last commit 22 Oct 2026.
MCP server for the Vulners.com API
Installs per day
peak 285 · avg 42 · -74% w/w
a month agotoday
Uptime history
20 days of history
20 days agonow
100.0%
Uptime 24h
91 of 91 checks
7
Tools
read from the server
153 ms
Response time
average over 24h
140
Installs / week
npm and PyPI
What changed 1
Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 22 October 2026. No other catalogue keeps this.
22 Oct
a tool changed version
Nothing serious here today
Today is the operative word: we check Vulners MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 12 min ago.
run in your terminal
claude mcp add vulners-mcp --transport http https://mcp.vulners.com/mcpSettings → Connectors → Add custom connector, then paste this address
https://mcp.vulners.com/mcp~/.codex/config.toml
[mcp_servers.vulners-mcp]
url = "https://mcp.vulners.com/mcp".cursor/mcp.json
{
"mcpServers": {
"vulners-mcp": {
"url": "https://mcp.vulners.com/mcp"
}
}
}.vscode/mcp.json
{
"servers": {
"vulners-mcp": {
"type": "http",
"url": "https://mcp.vulners.com/mcp"
}
}
}Available tools 7
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
audit
audit_linux_packages
Linux package audit (RPM/DEB) for a given distro + version. Analyze Linux package vulnerabilities against the Vulners database.
audit_software
🔍 VERSION-SPECIFIC SOFTWARE AUDIT 🔍 Audit specific software versions for known vulnerabilities. Use this when you have exact software version information (e.g., Chrome 138.0.7204.184). NEVER use search_lucene for version-specific software audits.
autocomplete
query_autocomplete
Autocomplete helper for search inputs (vendors, products, CVEs, etc.). Get search suggestions from the Vulners database.
bulletin
bulletin_by_id
🚨 PRIMARY TOOL FOR KNOWN IDs 🚨 Fetch a bulletin by CVE or Vulners ID. Returns a COMPACT triage-card summary by default -- id, title, CVSS3, EPSS, CVE list, and a compact exploitation/AI signal -- NOT the full record. Pass fields=[...] to widen (e.g. add 'description', 'cvss', 'cvss2', 'affectedSoftware') or references=True for the linked-bulletin graph; requesting everything can be very large. Supports single ID or list of IDs. When list is provided, references are automatically set to False. NEVER use search_lucene for known IDs.
cpe
search_cpe
Find CPE strings by vendor+product (latest schema). Search for Common Platform Enumeration identifiers in the Vulners database.
lucene
search_lucene
🔍 DISCOVERY TOOL FOR UNKNOWN VULNERABILITIES 🔍 Full-text search in Vulners Knowledge Base using Lucene syntax. Use ONLY when you don't have specific IDs or version information. NEVER use for known CVE/bulletin IDs - use bulletin_by_id instead. NEVER use for specific software versions (e.g., 'Chrome 138.0.7204.184') - use audit_software instead. 🚨 CRITICAL: For vendor/product searches, ALWAYS use cnaAffected.vendor and cnaAffected.product fields - the affectedSoftware field does NOT exist.
supported
get_supported_os
List supported OS identifiers/versions for Linux package audit. Get available operating systems for vulnerability analysis.
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://mcp.vulners.com/mcp | streamable-http | answering | 103 ms | 12 min ago |
Alternatives to Vulners MCP
same job, measured the same waySwapi MCP
by abhishekjkrsna
MCP server for SWAPI API
Mux
by mux
The official MCP Server for the Mux API
OKX MCP Server
by aahl
MCP Server for okx.com
Linkedctl
by alexey-pelykh
CLI and MCP server for the LinkedIn API
Seline
by getseline
MCP server for the Seline Analytics API
Python MCP
by files
Local-only Python MCP server for the Files.com API.
Caddy MCP Server
by yawlabs
MCP server for managing Caddy web servers via the admin API
Qontoctl
by alexey-pelykh
CLI and MCP server for the Qonto banking API
Vulners MCP — questions
Answers built from our own checks of this server.
What can Vulners MCP do?
It exposes 7 tools, read directly from the server on our last check. Among them: audit_linux_packages, audit_software, bulletin_by_id, get_supported_os, query_autocomplete, search_cpe and 1 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README.
How MCP servers expose tools in the first place →
Is Vulners MCP working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 153 ms. The bar chart above shows every period we have measured.
How do I connect Vulners MCP?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Vulners MCP need an API key?
No. Vulners MCP completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 7 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Vulners MCP?
It answers our handshake in 153 ms on average, which is faster than 81% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.
How many people use Vulners MCP?
The pypi package vulners-mcp was installed 140 times in the last week. Week over week that is -74%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Vulners MCP open source?
We cannot say either way: written in Python and 7 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.