mcp-vulnlab

mriver15/mcp-vulnlab

★ 0 stars Python Security Updated 1d ago

A set of deliberately vulnerable MCP servers (injection sinks, exfiltration tools, over-broad tool schemas, PII leaks), each labeled, plus a metrics harness that runs any scanner against the corpus and prints a detection-rate scorecard.

View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcp-vulnlab": {
      "command": "uvx",
      "args": [
        "mcp-vulnlab"
      ]
    }
  }
}

Or install with pip: pip install mcp-vulnlab

README Excerpt

**An open-source evaluation corpus and benchmark harness for MCP security.** > The MCP security ecosystem has plenty of scanners and no shared testbed. This is the testbed. Eleven deliberately vulnerable MCP servers, 14 labeled exploitable weaknesses across 8 threat categories, 3 benign controls for false-positive measurement, and

mcp-vulnlab

Quick Install

README Excerpt

Related Security Servers