Damn Vulnerable MCP Server

Stale
GitHub Python No License

Description

A deliberately vulnerable MCP server for security education, containing multiple MCP protocol vulnerability scenarios to help developers understand and prevent agent security risks.

Key Features

  • 10 progressive difficulty challenges covering MCP security vulnerabilities
  • Covers prompt injection, tool poisoning, rug pull, and token theft attacks
  • Docker-based lab environment for hands-on security training
  • Includes easy, medium, and hard challenge tiers with solution guides
  • Demonstrates multi-vector attack chaining for advanced scenarios
  • Compatible with MCP clients like Cline (VSCode Extension)

Use Cases

πŸ’‘ Security researchers learning MCP protocol vulnerabilities
πŸ’‘ Developers building secure MCP server implementations
πŸ’‘ AI safety professionals training on agent attack vectors
πŸ’‘ Red team exercises targeting MCP-based AI systems
πŸ’‘ Educational coursework on LLM application security

Tags

mcp security vulnerability education red-team

Categories

πŸ›‘οΈ Security & Guardrails πŸ”Œ MCP Tools

Quick Start

Clone the repo, then run: docker build -t dvmcp . && docker run -p 9001-9010:9001-9010 dvmcp. Connect via Cline VSCode Extension. Recommended environment: Docker on Linux.
Visit GitHub

Related Projects