Related Servers

• Damn Vulnerable MCP Server

  pfelilpe

  A

  license

  C

  quality

  D

  maintenance

  A vulnerable MCP server implementation that demonstrates how poor coding practices can lead to security issues like Remote Code Execution, designed for educational purposes to add numbers.

  Updated a year ago (2025-04-12 13:24 UTC)

  1

  2

  MIT

Related Servers

• MCP Object-Authz Lab

  WRG-11

  A

  license

  B

  quality

  A

  maintenance

  A self-hostable, vulnerable-by-design MCP server for learning how object-level authorization bugs (BOLA/IDOR) appear in multi-tenant tools.

  Updated 7 days ago (2026-08-27 16:45 UTC)

  18

  MIT

• DVMCP — Damn Vulnerable MCP

  ds-ac-poc

  A

  license

  B

  quality

  C

  maintenance

  An intentionally vulnerable MCP server for security training, simulating a fictional company with 28 vulnerable tools and 38 challenges to learn AI agent attack and defense.

  Updated 24 days ago (2026-08-10 20:55 UTC)

  28

  MIT

• Vulnerable MCP Server

  JoyGhoshs

  F

  license

  -Not graded

  quality

  D

  maintenance

  A deliberately insecure MCP server designed as a pentest lab to demonstrate common vulnerabilities in MCP deployments.

  Updated 3 months ago (2026-06-09 16:54 UTC)

• MCP Goat

  satishpatnayak

  A

  license

  -Not graded

  quality

  D

  maintenance

  A deliberately vulnerable MCP application for learning MCP security through hands-on exercises covering OWASP MCP Top 10 categories.

  Updated 5 months ago (2026-03-21 05:58 UTC)

  MIT

• Damn Vulnerable Model Context

  harishsg993010

  F

  license

  -Not graded

  quality

  F

  maintenance

  An educational project that deliberately implements vulnerable MCP servers to demonstrate various security risks like prompt injection, tool poisoning, and code execution for training security researchers and AI safety professionals.

  Updated 9 months ago (2025-12-08 00:14 UTC)

  1,341

• MCP Splunk

  vforvishal12

  F

  license

  -Not graded

  quality

  D

  maintenance

  A security-focused MCP server that enables automated log retrieval and threat analysis using LangGraph orchestration and RAG. It allows users to detect suspicious activity and generate structured security insights by integrating LLM reasoning with log data and runbook documentation.

  Updated 7 months ago (2026-02-19 06:53 UTC)