MCP Security Testing Framework

Example Use Cases

• 1

  Detect command injection and RCE vulnerabilities in MCP tools.

• 2

  Identify path traversal and prompt injection risks in MCP servers.

• 3

  Structured security reports for AI-assisted analysis and CI/CD integration.

Description

Mcpwn is a pure Python security testing framework designed to identify critical vulnerabilities in MCP servers, such as remote code execution, path traversal, and prompt injection. It provides structured JSON and SARIF reports for integration with AI analysis and CI/CD pipelines. The tool supports configurable timeouts, safe mode to skip destructive tests, and parallel testing, enabling efficient and comprehensive security assessments.