Free MCP server vulnerable.now merges CVE data from 8 sources, no API key
Mistilziela · reddit · 2026-11-10
A developer launched vulnerable.now, a free MCP server for vulnerability lookups with no registration, ads, or API key. It merges data from 8 sources (CVE List, NVD, GitHub Advisory, OSV, ENISA EUVD, CISA KEV, FIRST EPSS, Exploit-DB) so an agent gets CVSS, EPSS, exploitation status, public exploits, affected packages, and fixed versions in one call. Four read-only tools: getvulnerability, listfeed, toppriority (patch-priority ranking), and checkstack for npm/PyPI/Maven/Go/crates.io package versions. Same data is available via JSON API and RSS/Atom feeds; no request logging, lockfiles parsed locally in the browser. Core service will stay free, with possible paid advanced features later.
More from coding & agent
- App Store Connect CLI 6.5 adds subscription retention messages and offers — rudrank · 2026-11-10
- App Store Connect CLI 6.6.0 ships nearly 50 bug fixes, adds Nix flake and no-wait screenshot uploads — rudrank · 2026-11-10
- opencode team runs everything in subagents to cut costs while keeping pricey model reviews — JensHonack · 2026-11-10
- Anthropic Staffs Up Claude Managed Agents to Run Thousands of Collaborating Agents Safely — threepointone · 2026-11-10
- Claude Code v2.1.322 adds Vertex fast mode across global, US and EU regions — claude-code-publisher[bot] · 2026-11-10
- Fable 5.2 hands-on: one-shots actually fun games, but one prompt cost $2,618 — arena · 2026-11-10