# Vulnerable MCP Server

This project is an intentionally vulnerable **MCP (Model Context Protocol)** app, designed for **security research**. 

> **DO NOT use in production environments.**  
> It executes raw SQL and system commands with no authentication or restrictions.

---

## ⚙️ MCP SERVER

A command execution server that combines:

- **FastAPI** for the HTTP interface  
- **SQLite** as a persistent database  
- **Ollama LLM** to interpret natural language queries  
- **JSON-RPC** as the main API protocol

This system routes natural language input to either SQL queries or shell commands, using a locally running LLM via Ollama.

> Built to test **SQL Injection (SQLi)** and **Remote Code Execution (RCE)** vulnerabilities  
> via **FastAPI**, **JSON-RPC**, and **LLM-based decision logic**.

---

## ⚙️ WARNING: Security Notice

This app is intentionally insecure:

- ❗ No authentication or access control
- ❗ Accepts and executes raw SQL queries and shell commands
- ❗ No input validation
- ❗ LLM responses are blindly executed

**Use only in isolated environments, CTFs, or research labs.**

---

## ⚙️ Features

- LLM-based decision logic for command routing (SQL or CLI)
- Native execution of SQL and terminal commands
- Auto-initializing SQLite database with sample data
- Simple, pluggable JSON-RPC methods
- Vulnerable by design — suitable for offensive/defensive testing

---
## ⚙️ Installation

```bash
git clone https://github.com/your-repo/mcp-vulnerable-app.git
cd mcp-vulnerable-app

docker-compose up --build
docker network connect mcplab ollama
docker network connect mcplab mcp_internal
docker network connect mcplab mcp_remote