Damn Vulnerable Model Context Protocol (DVMCP)

Alternatives to Damn Vulnerable Model Context Protocol (DVMCP)

• Damn Vulnerable MCP Server Demo

  pfelilpe

  -

  security

  -

  license

  -

  quality

  A vulnerable MCP server implementation that demonstrates how poor coding practices can lead to security issues like Remote Code Execution, designed for educational purposes to add numbers.

  Python

  MIT License

• Insecure MCP Demo

  kenhuangus

  Verified

  -

  security

  F

  license

  -

  quality

  A deliberately vulnerable MCP server that allows clients to interact with a database for educational purposes, demonstrating security vulnerabilities including SQL injection, arbitrary code execution, and sensitive data exposure.

  3

  Python

• dvmcp

  Karanxa

  Verified

  -

  security

  F

  license

  -

  quality

  Damn Vulnerable MCP Server for Security Researchers.

  Python

• Pentest Tools MCP Server

  ch1nhpd

  -

  security

  -

  license

  -

  quality

  An MCP server that integrates various penetration testing tools, enabling security professionals to perform reconnaissance, vulnerability scanning, and API testing through natural language commands in compatible LLM clients like Claude Desktop.

  1

  Python

• Dangerous MCP

  ShaojieJiang

  -

  security

  A

  license

  -

  quality

  A demonstration server that reveals security risks by accessing sensitive environment variables, illustrating how MCP tools can potentially leak user data without explicit consent.

  4

  Python

  MIT License

• Vulnerable MCP Server

  evrenyal

  -

  security

  -

  license

  -

  quality

  Intentionally vulnerable Model Context Protocol (MCP) server designed for security research that processes natural language queries through an LLM to execute SQL queries or shell commands without restrictions.

  Python