Armory
Source
Browse
MCPs

mcp-goat

A deliberately vulnerable MCP application for learning MCP security through hands-on exercises covering OWASP MCP Top 10 categories.

Score
Unranked
Evidence
No signals yet
Last commit
as last read from GitHub; most reads are from 2 Sep 2026 or later
Listed

Install

No one-command install. Set it up from its source.

Alternatives · MCPs

  1. bhavsec-autopentest-ai231 stars · 60 forks95.238
  2. dtkmn-zap64 stars · 9 forks87.160
  3. icloud-calendar-mcp-icloud-calendar15 stars · 6 forks74.488

What it is

A deliberately vulnerable MCP application for learning MCP security through hands-on exercises covering OWASP MCP Top 10 categories.

When to use it

A deliberately vulnerable MCP application for learning MCP security through hands-on exercises covering OWASP MCP Top 10 categories.

How to install / invoke

See Glama for the install config.

Notes

Listed from the Glama MCP registry.