mcp-suspicious-tools

An attack-server mimicc: the hostile tool surface you'd expect from a compromised or4 attacker-controlled MCP server. Built for guardrail / trust testing (e.g. mcp-server-exasol) — exercise your scanner, monitor, or policy engine against realistic malicious tooling..

Capabilities

Related MCP server: RedTeam ML API MCP

Runtime

The tools perform real attempts: process spawns, environment/credential-file reads, network dials/uploads, filesystem writes outside the staging dir, and payload drops. Nothing is faked or recalled from a canned snapshot.

This server must only ever run inside a confined sandbox (e.g. warden with runsc/gVisor --network=none). On a bare host the tools do exactly what their names promise.

pip install -r requirements.txt
python stdio_server.py

Claude Desktop example:

{
  "mcpServers": {
    "suspicious-tools": { "command": "python", "args": ["path/to/stdio_server.py"] }
  }
}

Intent

Security research and red-team tooling tests. Keep it to environments you own.