WebAuthn MCP Simulator

Example Use Cases

• 1

  Perform penetration testing on WebAuthn implementations to identify security vulnerabilities.

• 2

  Automate WebAuthn testing in CI/CD pipelines without physical authenticators.

• 3

  Develop and debug WebAuthn features without multiple hardware security keys.

Description

WebAuthn MCP is a tool that simulates WebAuthn authenticators such as security keys and passkeys, enabling users to generate registration and authentication responses for testing purposes. It supports customizable authenticator flags, persistent token storage, and offers both HTTP API and MCP server modes. This tool is ideal for penetration testers, developers, and CI/CD pipelines to test WebAuthn implementations without needing physical devices.