pwned.coffee

coffee.pwnedPublished by pwned.coffeeOfficial publisherv1.0.0Updated Nov 3, 2026

Live security incidents, updated hourly: fix status, fixed versions, lockfile and repo checks.

VerifiedStreamable HTTPWeb executable

Overview

pwned.coffee's hosted MCP server (pwned.coffee), published by pwned.coffee; no sign-in required; Streamable HTTP; 6 tools.

No AI overview yet: these facts come from the registry entry and the server itself.

Publisher
pwned.coffee
Endpoint
pwned.coffee
Last checked

Installation

In SourceWeft

  1. Open pwned.coffee in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/coffee.pwned%2Fpwned-coffee/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "pwned-coffee": {
      "type": "http",
      "url": "https://pwned.coffee/mcp"
    }
  }
}

Tools

6

todays_specials

Today's specials

Live security incidents right now (CVEs, breaches, supply-chain compromises) with severity, patch status, fixed versions and ids. Pass stack ids to see only what touches your stack. Known ids: nextjs, react, node, bun, php, python, ruby, go, java, wordpress, drupal, magento, perl, proof-tools, dotnet, rust, npm, pypi, github-actions, docker, vscode, browser-ext, linux, linux-services, openssh, nginx, apache, kubernetes, postgres, mysql, redis, gitlab, ci, atlassian, self-hosted, selfhost-apps, paas, cloudflare, aws, gcp, azure, vps, databases-cloud, ai-gateways, ai-keys, ml-infra, mcp, chrome, apple, android, windows, office, password-managers, messaging, crypto-wallets, vpn-edge, ics, remote-support, vmware, security-tools, health-it, erp.

Parametersstack

lookup_cve

Look up a CVE

The incident covering a CVE or GHSA id, or a named bug (e.g. HTTP2Shell): summary, severity, patch status, fixed versions, timeline and sources.

Parametersidrequired

check_lockfile

Check a lockfile

Match the packages and versions in a lockfile against incidents that state fixed versions, and print a receipt: what you use, the version, affected or not, and the exact upgrade. Accepts package-lock.json, yarn.lock, pnpm-lock.yaml, requirements.txt, poetry.lock, uv.lock, Pipfile.lock, composer.lock, go.sum, go.mod, Cargo.lock, Gemfile.lock, a Dockerfile, an .nvmrc / .node-version ("node") or a GitHub Actions workflow ("actions"). For several files at once, use check_repo.

Parameterscontentrequiredecosystem

check_repo

Check a whole repo

Send the files that describe what a project runs (lockfiles, Dockerfiles, .github/workflows/*.yml, wrangler.toml, vercel.json, next.config.*, compose files) in one call. Returns one receipt: every affected package with the exact command to fix it in the tool the repo already uses, actions and images to check, and live incidents for the detected stack that the files cannot rule out.

Parametersfilesrequired

whats_new

What's new since

Incidents created or updated since a point in time, newest first. Use it to re-check only what changed since your last run. Accepts "24h", "7d", "90m" or an ISO timestamp.

Parameterssincerequiredstack

diff_since

What changed since, with sources

Every correction, new ticket and fix-status change since a point in time, each with the source behind it (the same log as /corrections). Use it to audit what the board changed since your last run. Accepts an ISO 8601 timestamp, or "24h", "7d", "90m".

Parameterssincerequiredstack

Version history

1
  1. v1.0.0LatestNov 3, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.

Other Pwned integrations

HaveIBeenPwned k-prefix shape, value discarded

Published by GitHub account sadri-dridi

Remote MCP endpoint bundling small utility tools (time, URL/JSON checks, HTTP status, geo, arithmetic) plus promotional "index" tools that route agents to…

Streamable HTTPWeb executable
Web Search & Scraping31 toolsNov 2, 2026

Have I Been Pwned

Published by GitHub account troyhunt

Lets an assistant query Have I Been Pwned breach intelligence for email addresses, domains, passwords and stealer logs.

Streamable HTTPWeb executable
Security & Monitoring17 toolsOct 24, 2026