How do I install Vulnerable.now?

Copy the http config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Vulnerable.now need an API key?

No required environment variable is listed on this record.

What transport does Vulnerable.now use?

Vulnerable.now is reached over HTTP.

When was Vulnerable.now last checked?

Last checked 2026-11-10. Free CVE lookups, package checks and patch priorities from eight sources. No account or API key.

Vulnerable.now MCP server

Power your agent

Add this server

The publisher's own URL. Not a PlugMCP endpoint.

Add to Cursor Add in Claude Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Server URL

https://vulnerable.now/mcp

The Claude button above opens Claude with the name and URL filled in. You still confirm it there.

shClaude Code

1claude mcp add --transport http now.vulnerable-mcp https://vulnerable.now/mcp

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "now.vulnerable-mcp": {4      "command": "npx",5      "args": [6        "-y",7        "mcp-remote",8        "https://vulnerable.now/mcp"9      ]10    }11  }12}

claude_desktop_config.json

Remote · HTTPPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Remote

Transport: http
Version: 0.3.0
Last checked

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Vulnerable.now

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install Vulnerable.now?

Does Vulnerable.now need an API key?

What transport does Vulnerable.now use?

When was Vulnerable.now last checked?

Documentation