{"adoption": {"forks": 173, "observed_at": "2026-08-28T04:04:25.870315+00:00", "stars": 1339}, "canonical_url": "https://ross.abutalabs.com/products/damn-vulnerable-mcp-server", "card": {"archived": false, "artifact_type": "learning-resource", "description": "Damn Vulnerable MCP Server", "domain": ["security", "artificial-intelligence", "large-language-models", "penetration-testing", "education"], "enriched": true, "function": ["security", "mcp", "penetration-testing"], "health_score": 54, "homepage": null, "language": "Python", "license": null, "license_family": "other", "maturity": "active", "member_repos": ["harishsg993010/damn-vulnerable-MCP-server"], "name": "harishsg993010/damn-vulnerable-MCP-server", "platform": ["python", "self-hosted"], "pushed_at": "2025-12-08T00:14:14+00:00", "repo": "harishsg993010/damn-vulnerable-MCP-server", "stars": 1339, "tags": ["mcp-security", "dvmcp", "prompt-injection", "tool-poisoning", "llm-security", "ai-agent-security", "security-training", "ctf-challenges", "deliberately-vulnerable", "hands-on-lab", "ai-safety", "docker", "linux"], "topics": [], "urls": [], "use_cases": ["practice exploiting prompt injection and tool poisoning in MCP servers", "learn LLM and AI agent security through hands-on challenges", "set up a vulnerable MCP target for security training or a CTF", "study MCP attack vectors like rug pull, tool shadowing, and token theft", "test AI agent security tooling against realistic vulnerable MCP implementations", "teach developers how to secure MCP tools, resources, and prompt implementations"], "what_it_is": "Damn Vulnerable MCP Server (DVMCP) is a deliberately vulnerable implementation of the Model Context Protocol built as an educational security lab containing 10 challenges of increasing difficulty. It demonstrates MCP-specific attack vectors such as prompt injection, tool poisoning, excessive permissions, rug pull attacks, tool shadowing, indirect injection, and token theft.", "when_to_avoid": ["You need a production-ready or hardened MCP server for real applications", "You want a clean reference implementation of the MCP protocol", "You need a native Windows environment (the project recommends Docker or Linux)"], "when_to_choose": ["You want a safe, self-hosted lab to practice attacking MCP/LLM integrations", "You are a security researcher, developer, or AI safety professional studying MCP-specific vulnerabilities", "You need challenge-based material with escalating difficulty for security education"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/damn-vulnerable-mcp-server", "repo": "harishsg993010/damn-vulnerable-MCP-server", "role": "main", "score": 45}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.870315+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T04:43:54.951452+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "150e79c77aaab1c93f1999ffa52db3f3b48495b4bbdebd0835177a172c3813f9", "fetched_at": "2026-08-28T04:04:25.870315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/harishsg993010/damn-vulnerable-MCP-server"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.870315+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T04:43:54.951452+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "150e79c77aaab1c93f1999ffa52db3f3b48495b4bbdebd0835177a172c3813f9", "fetched_at": "2026-08-28T04:04:25.870315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/harishsg993010/damn-vulnerable-MCP-server"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T04:43:54.951452+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "150e79c77aaab1c93f1999ffa52db3f3b48495b4bbdebd0835177a172c3813f9", "fetched_at": "2026-08-28T04:04:25.870315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/harishsg993010/damn-vulnerable-MCP-server"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.870315+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.870315+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.870315+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T04:43:54.951452+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "150e79c77aaab1c93f1999ffa52db3f3b48495b4bbdebd0835177a172c3813f9", "fetched_at": "2026-08-28T04:04:25.870315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/harishsg993010/damn-vulnerable-MCP-server"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.870315+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.870315+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T04:43:54.951452+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "150e79c77aaab1c93f1999ffa52db3f3b48495b4bbdebd0835177a172c3813f9", "fetched_at": "2026-08-28T04:04:25.870315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/harishsg993010/damn-vulnerable-MCP-server"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.870315+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.870315+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.870315+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T04:43:54.951452+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "150e79c77aaab1c93f1999ffa52db3f3b48495b4bbdebd0835177a172c3813f9", "fetched_at": "2026-08-28T04:04:25.870315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/harishsg993010/damn-vulnerable-MCP-server"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.870315+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.870315+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T04:43:54.951452+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "150e79c77aaab1c93f1999ffa52db3f3b48495b4bbdebd0835177a172c3813f9", "fetched_at": "2026-08-28T04:04:25.870315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/harishsg993010/damn-vulnerable-MCP-server"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T04:43:54.951452+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "150e79c77aaab1c93f1999ffa52db3f3b48495b4bbdebd0835177a172c3813f9", "fetched_at": "2026-08-28T04:04:25.870315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/harishsg993010/damn-vulnerable-MCP-server"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T04:43:54.951452+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "150e79c77aaab1c93f1999ffa52db3f3b48495b4bbdebd0835177a172c3813f9", "fetched_at": "2026-08-28T04:04:25.870315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/harishsg993010/damn-vulnerable-MCP-server"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T04:43:54.951452+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "150e79c77aaab1c93f1999ffa52db3f3b48495b4bbdebd0835177a172c3813f9", "fetched_at": "2026-08-28T04:04:25.870315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/harishsg993010/damn-vulnerable-MCP-server"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 56, "longevity": 36, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases", "no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 504, "days_push": 269, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 45, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}