mcp-object-authz-lab
A self-hostable, vulnerable-by-design MCP server for learning how object-level authorization bugs (BOLA/IDOR) appear in multi-tenant tools.
- Score
- Unranked
- Evidence
- No signals yet
- Last commit
- as last read from GitHub; most reads are from 2 Sep 2026 or later
- Listed
Install
No one-command install. Set it up from its source.
Alternatives · MCPs
- plexmcp13 stars · 2 forks67.900
- cipher-rc5-firecrawl5 stars46.654
- mcp-api-pentest1 star22.557
What it is
A self-hostable, vulnerable-by-design MCP server for learning how object-level authorization bugs (BOLA/IDOR) appear in multi-tenant tools.
When to use it
A self-hostable, vulnerable-by-design MCP server for learning how object-level authorization bugs (BOLA/IDOR) appear in multi-tenant tools.
How to install / invoke
See Glama for the install config.
Notes
Listed from the Glama MCP registry.