harishsg993010/damn-vulnerable-MCP-server resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1339 stars · 173 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Damn Vulnerable MCP Server (DVMCP) is a deliberately vulnerable implementation of the Model Context Protocol built as an educational security lab containing 10 challenges of increasing difficulty. It demonstrates MCP-specific attack vectors such as prompt injection, tool poisoning, excessive permissions, rug pull attacks, tool shadowing, indirect injection, and token theft.

Use cases

• practice exploiting prompt injection and tool poisoning in MCP servers
• learn LLM and AI agent security through hands-on challenges
• set up a vulnerable MCP target for security training or a CTF
• study MCP attack vectors like rug pull, tool shadowing, and token theft
• test AI agent security tooling against realistic vulnerable MCP implementations
• teach developers how to secure MCP tools, resources, and prompt implementations

When to choose

• You want a safe, self-hosted lab to practice attacking MCP/LLM integrations
• You are a security researcher, developer, or AI safety professional studying MCP-specific vulnerabilities
• You need challenge-based material with escalating difficulty for security education

When to avoid

• You need a production-ready or hardened MCP server for real applications
• You want a clean reference implementation of the MCP protocol
• You need a native Windows environment (the project recommends Docker or Linux)

Facets

learning-resource · maturity active

security mcp penetration-testing security artificial-intelligence large-language-models penetration-testing education python self-hosted mcp-security dvmcp prompt-injection tool-poisoning llm-security ai-agent-security security-training ctf-challenges deliberately-vulnerable hands-on-lab ai-safety docker linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="harishsg993010/damn-vulnerable-MCP-server")