Armory
Source
Browse
MCPs

vuln-mcp-server

A vulnerable-by-design MCP server pair (NotesServer and VaultServer) for testing MCP security tools, featuring confused-deputy, prompt injection, and authorization bypass scenarios.

Score
Unranked
Evidence
No signals yet
Last commit
as last read from GitHub; most reads are from 2 Sep 2026 or later
Listed

Install

No one-command install. Set it up from its source.

Alternatives · MCPs

  1. bishopfox-otto-support20 stars63.429
  2. mcp-fortress4 stars · 3 forks53.985
  3. mandoline4 stars · 1 fork49.118

What it is

A vulnerable-by-design MCP server pair (NotesServer and VaultServer) for testing MCP security tools, featuring confused-deputy, prompt injection, and authorization bypass scenarios.

When to use it

A vulnerable-by-design MCP server pair (NotesServer and VaultServer) for testing MCP security tools, featuring confused-deputy, prompt injection, and authorization bypass scenarios.

How to install / invoke

See Glama for the install config.

Notes

Listed from the Glama MCP registry.