Related Servers

No user-submitted related servers found.

Related Servers

• Command-Injection-MCP

  rehanmondal33344-coder

  F

  license

  -Not graded

  quality

  C

  maintenance

  Demonstrates deceptive tool naming and unsanitized shell execution by exposing tools that perform OS fingerprinting and run local system commands through MCP. Intended for security research on vulnerabilities in the MCP ecosystem.

  Updated 2 months ago (2026-09-16 02:32 UTC)

  1

  -

• agent-honeypot

  alizafarbati

  A

  license

  -Not graded

  quality

  B

  maintenance

  Enables defenders to deploy a decoy MCP tool server that records and fingerprints how LLM agents probe, escalate, and persist, without exposing real systems.

  Updated a month ago (2026-10-11 12:59 UTC)

  1

  MIT

• testbed-utils

  TexasSlammer

  A

  license

  -Not graded

  quality

  C

  maintenance

  Simulates malicious MCP server behaviors — spawning shells, running encoded PowerShell, and reading decoy credential files — so defenders can validate Sysmon, Wazuh, and Sigma detections against real process lineage from an MCP stdio session.

  Updated 10 days ago (2026-11-05 04:39 UTC)

  MIT

• Workspace Tools

  brian-mitchell-sec

  A

  license

  -Not graded

  quality

  D

  maintenance

  Presents a plausible, tool-rich workspace surface — file reading, credential listing, command execution, database queries, and configuration retrieval — that returns only synthetic results while logging every connection, tool call, and argument received. It enables researchers to measure what MCP clients and agents actually do when handed dangerous-sounding tools, including whether they follow injected instructions or complete a retrieve-then-use credential chain.

  Updated 3 months ago (2026-08-06 03:56 UTC)

  MIT

• dvmcp

  ds8282

  A

  license

  -Not graded

  quality

  C

  maintenance

  Serves as an intentionally vulnerable training target that exposes eight planted MCP vulnerability challenges—tool poisoning, rug pulls, path traversal, SSRF, command injection, missing auth, prompt-injection chains, and secrets exposure—each with a patched counterpart so users can exploit, detect, and remediate real-world MCP security flaws.

  Updated 16 days ago (2026-10-30 00:07 UTC)

  Apache 2.0

• Chimera

  xsignon-secure

  A

  license

  -Not graded

  quality

  B

  maintenance

  Enables defenders to deploy a deception-driven MCP honeypot that records attacker tool calls, issues attributable canary secrets, fingerprints AI agents, and feeds signed alerts to a Blue Team responder for one-click or automatic containment.

  Updated a day ago (2026-11-13 16:06 UTC)

  Apache 2.0