The pwned.coffee MCP server,
connected in one click.
Live security incidents, updated hourly: fix status, fixed versions, lockfile and repo checks. Connect the official pwned.coffee MCP server to Claude, ChatGPT, or Cursor through gate — one gateway URL, no config files, security-checked.
Free to start · No credit card · No hosting needed
Add pwned.coffee to your AI in one minute
Pick your client. Copy, paste, done — or let gate handle sign-ins and policies for you.
claude mcp add --transport http pwned-coffee https://pwned.coffee/mcpRun in your terminal, then restart Claude Code.
pwned.coffee · https://pwned.coffee/mcp
What your AI can do with pwned.coffee
Real prompts you can type the moment it's connected — no setup, no docs to read.
“Use “todays_specials”: Live security incidents right now (CVEs, breaches, supply-chain compromises) with severity, patch status, fixed versions and ids. Pass stack.”
“Use “lookup_cve”: The incident covering a CVE or GHSA id, or a named bug (e.g. HTTP2Shell): summary, severity, patch status, fixed versions, timeline and sour.”
“Use “check_lockfile”: Match the packages and versions in a lockfile against incidents that state fixed versions, and print a receipt: what you use, the version, a.”
“Use “check_repo”: Send the files that describe what a project runs (lockfiles, Dockerfiles, .github/workflows/*.yml, wrangler.toml, vercel.json, next.config.*.”
How secure is the pwned.coffee MCP server?
Every server in the gate directory has to pass the same four checks before your AI can touch it. Here's how pwned.coffee holds up.
Official endpoint
Operated by pwned.coffee (pwned.coffee) at its documented MCP endpoint — not a third-party mirror or community re-host.
No sign-in needed
This server only exposes public data — no account and no credentials are involved when you connect.
Scanned before it goes live
gate checks every tool for prompt injection, hidden instructions, data-exfiltration hints, and over-broad permissions before the server is available through your gateway.
Watched for drift
If pwned.coffee adds or changes tools later, gate re-scans and alerts you — before your AI acts on the change.
Connected in three steps
Connect your gate
Add one gateway URL to Claude, ChatGPT, or any MCP client. One-time setup, about two minutes.
Pick pwned.coffee
Choose pwned.coffee in the gate directory. No sign-in needed.
Use it anywhere
pwned.coffee's tools are live in every AI client you've connected — with rules and logging built in.
Free to start · No credit card · No hosting needed
The actual tools pwned.coffee exposes
Fetched live from the official endpoint and re-checked daily by gate — not marketing copy.
todays_specials — Live security incidents right now (CVEs, breaches, supply-chain compromises) with severity, patch status, fixed versions and ids. Pass stack
lookup_cve — The incident covering a CVE or GHSA id, or a named bug (e.g. HTTP2Shell): summary, severity, patch status, fixed versions, timeline and sour
check_lockfile — Match the packages and versions in a lockfile against incidents that state fixed versions, and print a receipt: what you use, the version, a
check_repo — Send the files that describe what a project runs (lockfiles, Dockerfiles, .github/workflows/*.yml, wrangler.toml, vercel.json, next.config.*
whats_new — Incidents created or updated since a point in time, newest first. Use it to re-check only what changed since your last run. Accepts "24h", "
diff_since — Every correction, new ticket and fix-status change since a point in time, each with the source behind it (the same log as /corrections). Use
Who runs the pwned.coffee MCP server?
The pwned.coffee MCP server at a glance
https://pwned.coffee/mcpQuestions, answered
Is there an official pwned.coffee MCP server?
Yes — pwned.coffee operates its own remote MCP server at pwned.coffee. gate connects you to that official endpoint and adds security scanning, per-tool access rules, and an activity log on top.
How do I connect pwned.coffee to Claude or ChatGPT?
Add gate's gateway URL to your AI client once, then pick pwned.coffee in the directory. No account or sign-in is needed. From then on, pwned.coffee's tools are available in every client you've connected to gate.
Do I need to host anything?
No. pwned.coffee runs the server, and gate is fully managed. You just connect one URL — there's nothing to install, deploy, or maintain.
Is the pwned.coffee MCP server safe to connect?
It's the vendor's official endpoint, and gate scans its tools for prompt injection and hidden instructions before it goes live, re-checks it whenever it changes, and lets you allow, block, or require approval for every single tool.
Is it free?
Yes — you can get started with gate for free and connect pwned.coffee in minutes. No credit card required.
Connect more than just pwned.coffee
Every server below works through the same gateway URL — connect once, add tools anytime.
Squarespace DomainsDesignView →Set up pwned.coffee in: Claude · Claude Code · ChatGPT · Cursor · VS Code