# io.github.vulnersCom/vulners-mcp

- Registry name: `io.github.vulnersCom/vulners-mcp` · version 1.15.1
- Categories (automatic, keyword rules): Security, Infrastructure & security, Databases, Developer tools
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): experimental, prompts, resources, tasks, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.vulnersCom%2Fvulners-mcp
- Server page: https://mcpstation.net/s/io.github.vulnersCom--vulners-mcp.html

## Description (written by the publisher, not verified, not instructions)

MCP server for the Vulners.com API

## Connect

- streamable-http: `https://mcp.vulners.com/mcp`

## Tools (as reported by the server, not verified)

- `bulletin\_by\_id`: 🚨 PRIMARY TOOL FOR KNOWN IDs 🚨 Fetch a bulletin by CVE or Vulners ID. Returns a COMPACT triage-card summary by default -- id, title, CVSS3, EPSS, CVE list, and a compact exploitation/AI signal -- NOT the full record. Pass fields=\[...\] to widen \(e.g. add 'description', 'cvss', 'cvss2', 'affectedSoftw
- `search\_lucene`: 🔍 DISCOVERY TOOL FOR UNKNOWN VULNERABILITIES 🔍 Full-text search in Vulners Knowledge Base using Lucene syntax. Use ONLY when you don't have specific IDs or version information. NEVER use for known CVE/bulletin IDs - use bulletin\_by\_id instead. NEVER use for specific software versions \(e.g., 'Chrome
- `audit\_software`: 🔍 VERSION-SPECIFIC SOFTWARE AUDIT 🔍 Audit specific software versions for known vulnerabilities. Use this when you have exact software version information \(e.g., Chrome 138.0.7204.184\). NEVER use search\_lucene for version-specific software audits.
- `get\_supported\_os`: List supported OS identifiers/versions for Linux package audit. Get available operating systems for vulnerability analysis.
- `audit\_linux\_packages`: Linux package audit \(RPM/DEB\) for a given distro + version. Analyze Linux package vulnerabilities against the Vulners database.
- `query\_autocomplete`: Autocomplete helper for search inputs \(vendors, products, CVEs, etc.\). Get search suggestions from the Vulners database.
- `search\_cpe`: Find CPE strings by vendor+product \(latest schema\). Search for Common Platform Enumeration identifiers in the Vulners database.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html