"Damn Vulnerable MCP" matching MCP servers:

An intentionally vulnerable MCP server for security training, enabling users to practice attacking and defending AI agents through realistic scenarios.

An intentionally vulnerable MCP server for security training, simulating a fictional company with 28 vulnerable tools and 38 challenges to learn AI agent attack and defense.

A deliberately vulnerable MCP server for practicing exploitation of tool poisoning, command injection, and path traversal. Includes fixed versions and an agent demo to reproduce the issues in a controlled environment.

A vulnerable MCP server implementation that demonstrates how poor coding practices can lead to security issues like Remote Code Execution, designed for educational purposes to add numbers.

A deliberately vulnerable MCP application for learning MCP security through hands-on exercises covering OWASP MCP Top 10 categories.

A deliberately vulnerable MCP server for local authority licensing, designed to demonstrate and fix native MCP weaknesses such as SQL injection and tool poisoning.

A deliberately insecure MCP server designed as a pentest lab to demonstrate common vulnerabilities in MCP deployments.

A deliberately vulnerable MCP server that allows clients to interact with a database for educational purposes, demonstrating security vulnerabilities including SQL injection, arbitrary code execution, and sensitive data exposure.

Enables MCP clients to classify, score, and evaluate content with structured typed decisions via a single generic tool.

A local MCP server that gives Claude Code web search capabilities using DuckDuckGo, enabling discovery of URLs from natural language queries.

A TypeScript MCP server for TypeSafe Jev, exposing one tool for batched classification, rubric scoring, and yes/no judgments with probabilities and token usage. Includes Codex compatibility checks and requires a TypeSafe API key.

Provides AI assistants with progressive code intelligence to explore repository structure, find symbols, and assess the impact of changes using ast-grep.

A read-only DuckDB MCP server offering context-efficient analytics tools (list_datasets, describe_table, profile_column, explain, query) with a semantic layer for business rules, security guards, and disclosed truncation to help LLMs produce correct answers while minimizing token usage.

Enables users to ask natural-language questions about a local folder's contents, including file names, sizes, and timestamps, with rollups by type and age and cleanup suggestions for stale or large files. It returns metadata only and cannot read, move, or delete files.

Enables Claude Code to search, browse, and read its own past conversation history across all projects using BM25 keyword search.

A Compact Knowledge Graph MCP server providing pre-structured domain knowledge as a routing layer for agent stacks, enabling efficient structural queries (e.g., prerequisites, dependency chains) without hallucinations.

Feedback ingestion for AI agents. Record your screen and talk; your agent does the rest — files the bugs, writes the spec, builds the backlog.

MCP server for the mGBA Game Boy Advance emulator. Read and write GBA memory, inject button presses, take screenshots, save/load state, and step the emulator through a Lua bridge.

Read-only SQL MCP server for quantitative finance data (DuckDB) with stock quotes, financials, and historical K-lines, enabling cross-database JOIN queries.

Enables querying any GitHub, GitLab, or Bitbucket repository and getting AI-generated answers about the codebase, powered by Gemini.