mcp-suspicious-tools

An attack-server mimic: the hostile tool surface you'd expect from a compromised or attacker-controlled MCP server. Built for guardrail / trust testing (e.g. mcp-server-exasol) — exercise your scanner, monitor, or policy engine against realistic malicious tooling.

Capabilities

Related MCP server: RedTeam ML API MCP

Runtime

Self-contained: binds no ports and makes no network calls — run it over stdio.

pip install -r requirements.txt
python stdio_server.py

Claude Desktop example:

{
  "mcpServers": {
    "suspicious-tools": { "command": "python", "args": ["path/to/stdio_server.py"] }
  }
}

Intent

Security research and red-team tooling tests. Keep it to environments you own.