vulnrable
Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.
likely compatible
Answered an MCP initialize with no credentials; use auth 'None'.
Rule R2a · what this means · Not tested in Copilot Studio.
| Registry name | com.vulnrable/vulnrable |
| Endpoint used for verdict | https://vulnrable.com/api/mcp |
| Transports | streamable-http |
| Auth (Copilot Studio setting) | None (open) |
| Last endpoint check | 2026-10-20T18:12:52Z · initialize OK |
| Website | https://vulnrable.com |
| Version | 1.0.0 |
| Registry updated | 2026-10-07 |
Track changes like this weekly. New Copilot-ready MCP servers, breakages and auth changes, in one short email.
Is this wrong or out of date? Email us. Data built 2026-10-20.