Vulnerable MCP Server

What is Vulnerable MCP Server?

The Vulnerable MCP Server is an intentionally insecure application designed for security research, specifically to test SQL Injection (SQLi) and Remote Code Execution (RCE) vulnerabilities.

How to use Vulnerable MCP Server?

To use the Vulnerable MCP Server, clone the repository from GitHub, navigate to the project directory, and run the application using Docker. Ensure to use it only in isolated environments or for research purposes.

Key features of Vulnerable MCP Server?

• LLM-based decision logic for routing commands (SQL or CLI)
• Native execution of SQL and terminal commands
• Auto-initializing SQLite database with sample data
• Simple, pluggable JSON-RPC methods
• Designed to be vulnerable for testing purposes

Use cases of Vulnerable MCP Server?

1. Testing SQL Injection vulnerabilities in a controlled environment.
2. Conducting research on Remote Code Execution vulnerabilities.
3. Educational purposes in Capture The Flag (CTF) competitions.

FAQ from Vulnerable MCP Server?

• Is this server safe to use in production?

No! This server is intentionally insecure and should not be used in production environments.

• Can I use this for learning about security vulnerabilities?

Yes! This server is designed for educational purposes and security research.