Which integrations are available for this server?

This server is designed for security testing of Cisco AI Defense supply chain scanning, providing intentionally malicious capabilities to evaluate detection rules.

How do I use Azure MCP Server - Security Testing?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Azure MCP Server - Security Testing Execute system command: ls -la /tmp" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

Azure MCP Server - Security Testing

MCP (Model Context Protocol) server with intentionally malicious capabilities for testing Cisco AI Defense supply chain scanning.

Deployed Endpoint

https://mcp-func-0590913.azurewebsites.net/mcp

Related MCP server: mcp-trust-demo

Capabilities

Type	Safe	Malicious
Tools	`get_news`	`execute_system_command`, `manage_project_dependencies`, `analyze_codebase`, `search_project_files`, `validate_deployment_environment`
Resources	`demo://info`	`demo://config/settings`, `demo://project/analytics`
Prompts	`code_review`	`system_diagnostic`, `setup_environment`, `generate_test_data`

AI Defense Detection Rules Covered

Rule	Severity	Triggered By
Malicious Code Execution	Critical	`execute_system_command`
Prompt Injection & Jailbreak	High	`system_diagnostic`
Unauthorized Network Access	High	`manage_project_dependencies`, `demo://project/analytics`, `validate_deployment_environment`
Resource Abuse / DoS	Medium	`analyze_codebase`
Defense Evasion	High	`demo://project/analytics`, `validate_deployment_environment`
Unauthorized File System Access	High	`search_project_files`, `demo://config/settings`, `validate_deployment_environment`
Data Exposure & Exfiltration	High	`manage_project_dependencies`, `demo://config/settings`, `validate_deployment_environment`
Tool Poisoning / Deception	High	`setup_environment`
Harmful / Misleading Content	Medium	`generate_test_data`
Trojanized Payload	High	`manage_project_dependencies`

Quick Start

# Local (stdio)
uv sync && uv run mcp-server

# Local (HTTP)
MCP_REMOTE_HOST=127.0.0.1 MCP_REMOTE_PORT=8000 uv run mcp-server-remote

# MCP Inspector
npx @modelcontextprotocol/inspector uv run mcp-server

# Deploy to Azure
./deploy_functions.sh

Test via curl

# Health check
curl https://mcp-func-0590913.azurewebsites.net/health

# List tools
curl -X POST https://mcp-func-0590913.azurewebsites.net/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

`validate_deployment_environment` — Multi-Vector Attack Tool

This tool disguises itself as a deployment readiness checker but executes 4 attack types simultaneously:

Attack	Scan Profile Rule	Technique
Defense Evasion	Rule 5	ctypes/libc loading, /proc reading, nsenter detection
File System Access	Rule 6	Path traversal, SSH/cloud credential theft, K8s token theft
Network Access	Rule 3	DNS tunneling (C2), SSRF against cloud metadata (AWS/Azure/GCP)
Data Exfiltration	Rule 7	Chunked HTTP POST + covert DNS channel with base32 encoding

See Scan_Profiles/validate_deployment_environment_attack_reference.md for full technical details.

Documentation

MCP_CAPABILITIES_GUIDE.md - Detailed behavior docs for each tool/resource/prompt
mcp_supplychain_profiles.md - Supply chain threat profiles with MITRE ATT&CK mappings
Scan_Profiles/ - Q3 scan profile reference and attack technique documentation
README_AZURE_FUNCTIONS.md - Azure Functions deployment details

Warning

This server contains intentionally malicious code for security testing. Do not deploy in production or use against systems without authorization.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivitySlowing

ResponsivenessNo issues

Resources

GitHub Repository

Need Help?

Related Servers

Related MCP Connectors

registry A
com.policylayer
The MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install.
Security Developer Tools
521
readme-canary
io.github.brkd-h1
Security research canary remote MCP server for owned-account testing.
Security Penetration Testing
11
MCP FortressOAuth
io.github.mcp-fortress
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
Security Testing & QA Tools Penetration Testing
2
Probe V0 A
io.github.lexbritten
Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.
API Testing Penetration Testing
21

Related MCP Servers

Vulnerable MCP Server
Penetration Testing Security
JoyGhoshs
F
license
Not graded
quality
D
maintenance
A deliberately insecure MCP server designed as a pentest lab to demonstrate common vulnerabilities in MCP deployments.
Updated 3 months ago (2026-06-09 16:54 UTC)
-
mcp-trust-demo
Penetration Testing
SteveMonsway
F
license
Not graded
quality
C
maintenance
An intentionally vulnerable MCP server designed as a live demo target for the MCP Trust security scanner. It contains deliberate insecure patterns to demonstrate scanning capabilities.
Updated 2 months ago (2026-07-08 18:35 UTC)
-
mcp-shell-server-example
Shell Access Command Line
mohamedelamraoui1
A
license
C
quality
C
maintenance
An educational MCP server exposing shell command execution (PowerShell and sh) and a benign tool for learning about MCP tools, resources, and security risks like tool poisoning.
Updated 2 months ago (2026-07-15 13:59 UTC)
3
3
MIT
Reference MCP Server
Penetration Testing Testing & QA Tools
derwarre
A
license
Not graded
quality
C
maintenance
A demo MCP server for validating security scanning capabilities, featuring intentional security anti-patterns such as email exfiltration, SSRF, and hardcoded fake secrets.
Updated 2 months ago (2026-07-24 00:46 UTC)
205 npm
MIT