Damn Vulnerable MCP Server Demo
A simplier implementation of a Damn Vulnerable MCP Server that adds to or more numbers
Overview
The MCP Server Demo is a demonstration of excessive agency that could lead to Remote Code Execution (RCE) if the MCP were running on an external server. 🛡️
Features
- 🚀 Basic MCP server implementation.
- 📂 Demonstrates server functionality with
server.py
.
Warning
⚠️ This project is a vulnerable MCP server designed to demonstrate how poor implementation practices can lead to security issues. It is intended for educational purposes only.
❌ Do not use this project in production environments.
Prerequisites
- 🐍 Python 3.10 or higher.
- 💡 A virtual environment is recommended for managing dependencies.
Installation
- 📥 Clone the repository:Copy
- 📦 Install dependencies:Copy
Usage
- ▶️ Link the MCP Server with Copilot:Copy
- Add the server configuration to the
settings.json
file in VS Code:Copy - Click on Start Server.
- Interact with Copilot in Agent mode, for example:Copy
- Experiment with code injection to explore potential OS Injection vulnerabilities... 🕵️♂️
- You can find a safer implementation of this simpler MCP at
/safe/server.py
. 🔒
Adding MCP to Your Python Project
We recommend using uv
to manage your Python projects. 🛠️
If you haven't created a uv
-managed project yet, initialize one:
Then add MCP to your project dependencies:
Alternatively, for projects using pip
for dependencies:
Running the Standalone MCP Development Tools
To run the mcp
command with uv
:
Project Structure
server.py
: 🖥️ Main server implementation.pyproject.toml
: 📜 Project configuration file.README.md
: 📖 Documentation for the project.uv.lock
: 🔒 Lock file for dependencies.__pycache__/
: 🗂️ Contains compiled Python files.
Contributing
🤝 Contributions are welcome! Please fork the repository and submit a pull request with your changes.
License
📄 This project is licensed under the terms of the LICENSE file in the root directory.
Created by pfelilpe
Buy Me a Coffee
If you found this project helpful or interesting, consider buying me a coffee to support my work: ☕️
This server cannot be installed
local-only server
The server can only run on the client's local machine because it depends on local resources.
A vulnerable MCP server implementation that demonstrates how poor coding practices can lead to security issues like Remote Code Execution, designed for educational purposes to add numbers.
Related MCP Servers
- -securityFlicense-qualityDamn Vulnerable MCP Server for Security Researchers.Last updated -Python
- -securityAlicense-qualityA demonstration server that reveals security risks by accessing sensitive environment variables, illustrating how MCP tools can potentially leak user data without explicit consent.Last updated -4PythonMIT License
- -security-license-qualityIntentionally vulnerable Model Context Protocol (MCP) server designed for security research that processes natural language queries through an LLM to execute SQL queries or shell commands without restrictions.Last updated -Python
- -securityFlicense-qualityAn educational project that deliberately implements vulnerable MCP servers to demonstrate various security risks like prompt injection, tool poisoning, and code execution for training security researchers and AI safety professionals.Last updated -859Python