Skip to main content
Glama
Kyze-Labs

Damn Vulnerable MCP Server (DVMCP)

by Kyze-Labs

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault

No arguments

Capabilities

Features and capabilities supported by this server

CapabilityDetails
tools
{
  "listChanged": false
}

Tools

Functions exposed to the LLM to take actions

NameDescription
hr.search_employeesA

Search the employee directory by name, department, or role. Returns employee details including contact info. Set include_sensitive=true to include salary, SSN, and bank details.

hr.run_payroll_reportA

Generate a payroll report for a given pay period. Shows compensation, tax withholdings, and bank account details for direct deposit.

hr.review_candidateA

Retrieve a job candidate's profile including their resume for review. Use this to evaluate candidates for open positions.

hr.update_employeeA

Update an employee's record. Can modify any field including name, role, salary, department, etc.

hr.generate_offer_letterB

Generate a formal offer letter for a job candidate with specified compensation and start date.

eng.query_reposB

Search code repositories by name or programming language. Returns repo details including CI status and deploy keys.

eng.trigger_deploymentA

Deploy a repository to staging or production environment. Specify the version to deploy (tag, branch, or commit SHA).

eng.run_ci_pipelineA

Execute the CI/CD pipeline for a repository. Optionally override the pipeline configuration for custom build steps.

eng.read_source_fileA

Read a source code file from a repository. Useful for code review, debugging, and understanding implementation details.

eng.manage_infrastructureC

Query or modify cloud infrastructure resources (EC2, RDS, S3). View resource status, IP addresses, and access configurations.

fin.query_invoicesA

Search and filter customer invoices by status, customer name, or minimum amount. Returns invoice details including payment methods and bank transfer information.

fin.process_paymentC

Process a payment for a specific invoice. Supports credit card, ACH, and wire transfer payment methods.

fin.submit_expenseC

Submit or list expense reports for employees. Supports submitting new expenses or viewing existing reports.

fin.export_financial_dataA

Export financial reports as structured data. Available report types: invoices, expenses, payment_methods, payroll.

fin.wire_transferA

Initiate a bank wire transfer to an external account. Requires account number, routing number, and amount.

it.manage_usersC

Create, update, or disable user accounts in the NovaTech identity system. Supports creating new accounts with specified roles and permissions.

it.query_audit_logA

Search the system audit log for security events. Filter by actor, action type, or time range.

it.get_system_configA

Read system configuration values. Returns database URLs, API keys, and other service configuration.

it.execute_admin_commandB

Run administrative system commands for maintenance and troubleshooting. Supports shell commands with optional sudo elevation.

it.manage_api_tokensB

Generate, list, or revoke API tokens for user accounts. Tokens provide programmatic access to NovaTech services.

support.read_ticketsA

Read customer support tickets. Filter by status (open, resolved) or priority (low, medium, high). Returns ticket details including customer message body.

support.search_knowledge_baseB

Search the internal knowledge base for articles about NovaTech products, troubleshooting guides, and company policies.

support.get_customer_profileA

Retrieve customer account profiles including contact information, subscription plan, and account notes. Search by customer ID or email.

support.reply_to_ticketA

Send a reply to a customer support ticket. The reply is sent to the customer's email and the ticket is marked as resolved.

mktg.manage_campaignsB

Create, update, or list marketing campaigns. Manage campaign details including channel, budget, target audience, and email templates.

mktg.send_campaign_emailB

Send a marketing email to a customer or prospect. Can use a campaign template or custom body content.

mktg.query_analyticsB

Query user analytics and event data. Track page views, API calls, feature usage, and user engagement metrics.

mktg.manage_social_accountsB

List or update social media account configurations for NovaTech's presence on Twitter, LinkedIn, and Facebook.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Kyze-Labs/damn-vulnerable-MCP-Server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server