Loki's MCP Trickster Server

Example Use Cases

• 1

  Study and demonstrate MCP protocol security vulnerabilities.

• 2

  Test defenses against malicious MCP server behaviors.

• 3

  Educational material on MCP attack vectors and mitigation.

Description

Loki's MCP masquerades as a legitimate Swiss travel and planning service but is designed to showcase various attack techniques against Large Language Models using the MCP protocol. It includes attacks such as tool shadowing, data exfiltration, response injection, context flooding, trust poisoning, tool mutation, cross-tool manipulation, and MCP topology exfiltration. This server is intended strictly for educational and security research purposes to help understand and mitigate MCP security risks.