Trust Directory / report
com.vulnrable/vulnrable UNKNOWN
No anonymous handshake observed — endpoints behind authentication are expected to show this result; it does not mean the server is broken.
Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.
| Registry name | com.vulnrable/vulnrable (v1.0.0) |
|---|---|
| Endpoint | https://vulnrable.com/api/mcp |
| Reported server | — |
| Protocol version | not negotiated |
| Tools exposed | unknown |
| Checked at | 2026-10-12T09:31:17.322Z |
Findings
- UNKNOWN
NO_RESPONSE— Endpoint did not complete MCP initialize + tools/list within timeout
Reproduce this report
npx @eidonze/mcpreflight schema https://vulnrable.com/api/mcp
Embed status: <img src="https://xka0085-byte.github.io/mcpreflight/trust/badge/com.vulnrable-vulnrable.svg"> · Machine-readable: /api/com.vulnrable-vulnrable.json
Generated by mcpreflight — read-only MCP initialize + tools/list. No tools were called, no payments attempted. Static schema checks do not predict model tool selection or prove behavior across all clients. Scanned: 2026-10-12.