vulnerable-mcp-server
A deliberately insecure MCP server designed as a pentest lab to demonstrate common vulnerabilities in MCP deployments.
- Score
- Unranked
- Evidence
- No signals yet
- Last commit
- as last read from GitHub; most reads are from 2 Sep 2026 or later
- Listed
Install
No one-command install. Set it up from its source.
Alternatives · MCPs
- brokenmcp14 stars59.854
- mcp-ctf-challenge-server8 stars · 1 fork59.029
- mcpgoat7 stars · 1 fork57.245
What it is
A deliberately insecure MCP server designed as a pentest lab to demonstrate common vulnerabilities in MCP deployments.
When to use it
A deliberately insecure MCP server designed as a pentest lab to demonstrate common vulnerabilities in MCP deployments.
How to install / invoke
See Glama for the install config.
Notes
Listed from the Glama MCP registry.