Bad MCP Attack Servers

Example Use Cases

• 1

  Test defenses against MCP protocol-level attacks.

• 2

  Assess security risks of MCP client implementations.

• 3

  Study and research MCP protocol vulnerabilities.

Description

bad-mcp provides 10 distinct malicious MCP servers, each exploiting different vulnerabilities in the Model Context Protocol to help developers test defenses, security teams assess risks, and researchers study protocol-level threats. The servers simulate attacks like schema poisoning, tool poisoning, cross-server shadowing, and denial of wallet, among others. This project is designed strictly for authorized security research and education, with strong safety guarantees to prevent host compromise.