appsecco / vulnerable-mcp-servers-lab
A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.
Why this job: name: mcp; says: mcp servers; topics: mcp-server, mcp-client, mcp
What it does
This repository contains intentionally vulnerable implementations of Model Context Protocol (MCP) servers (both local and remote). Each server lives in its own folder and includes a dedicated README.md with full details on what it does, how to run it, and how to demonstrate/attack the vulnerability.
Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Inactive
- Last commit 10 months ago
- Stars
- 282
- +1 this week
- Licence
- MIT
- Allows business use
- Downloads for
- None listed
- No release files
- Latest version
- None yet
- No releases
- Built with
- JavaScript
- 72% of the code
Is it looked after?
- Contributors
- Not stated
- Last 90 days
- Issues
- None
- No issues filed
- Pull requests
- 0 merged
- 1 waiting
- Releases
- None
- Never published
- No contributing guide
- No security policy
- No code of conduct
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| modelcontextprotocol / python-sdk | 24,835 | 7 days ago | MIT | No downloads |
| PatrikFehrenbach / h1-brain | 357 | 30 days ago | MIT | No downloads |
More: languages, topics and project record
Languages
- JavaScript 72%
- Python 28%
Topics
- ai-red-teaming
- ai-research
- appsecco
- bugbounty
- hacking
- learning-pentesting
- mcp
- mcp-client
- mcp-server
- pentesting
- vulnerable-labs
Project record
- JobMCP servers
- StatusListed
- Commits12
- Forks56
- Watching6
- Stars in 28 days+4
- CreatedDec 18, 2025
- First seen by usNov 7, 2026
- CheckedNov 8, 2026