広告掲載
MCP.so
ログイン

MCP Security Sandbox

@SirAppSec

リポジトリ

基本情報

カテゴリ

開発者ツール

ライセンス

MIT

トランスポート

stdio

作者

SirAppSec

MCP Security Sandbox について

MCP Security Playground - Hack with MCP Servers, MCP Clients. Try out different vulnerabilities and abuse LLMs and agents in a UI friendly experimentation lab

#security#playground#mcp#agents#llm

MCP Security Sandbox の設定

標準の設定はありません

このサーバーの README には解析可能な MCP 設定ブロックが含まれていません。インストール手順はリポジトリをご確認ください。

リポジトリ

MCP Security Sandbox のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is mcp-security-sandbox?

It is an experimental sandbox and lab for exploring MCP hosts, clients, and servers. It can perform attacks against MCP servers and abuse LLMs.

How to use mcp-security-sandbox?

Install dependencies using uv install, create a virtual environment with uv venv, activate it, then run the server with uv run -- src/mcp-security-sandbox/mcp/github/server.py and launch the Streamlit frontend with streamlit run src/mcp-security-sandbox/frontend/MCP_Chat.py. Ensure Ollama is installed and its URL is set in the client initializations.

Key features of mcp-security-sandbox?

  • Experimental sandbox for MCP exploration and attacks
  • Integrates a GitHub retrieval MCP server into a chat agent
  • Supports chaining with Burp Suite MCP Server
  • Provides a Streamlit-based chat interface
  • Allows abuse of LLMs for attack scenarios
  • Uses Ollama for local LLM integration

Use cases of mcp-security-sandbox?

  • Test security of MCP servers against attacks
  • Simulate malicious MCP server behavior
  • Experiment with chaining multiple MCP servers
  • Educate on MCP security vulnerabilities

よくある質問

1

What dependencies are required?

Ollama must be installed and its URL configured in the client initializations. The project uses `uv` for package and environment management.

2

How do I start the frontend?

Run `uv install`, `uv venv`, `source .venv/bin/activate`, then `uv run -- src/mcp-security-sandbox/mcp/github/server.py` and `streamlit run src/mcp-security-sandbox/frontend/MCP_Chat.py`.

3

Does the sandbox support dynamic loading of MCP servers?

No, dynamic loading is on the roadmap but not yet implemented; currently servers are statically defined.

4

What is the purpose of this project?

It is an experimental sandbox for exploring MCP hosts, clients, and servers, and for performing attacks against MCP servers and abusing LLMs.

5

Can I integrate Burp Suite?

Yes, the README shows using Burp Suite MCP Server to

コメント

「開発者ツール」の他のコンテンツ

discoverGPT

Joe Monastiero

discoverGPT is visualAI's MCP gateway for AI commerce: one connection gives Claude 40 tools spanning product search, data-quality review, AI-discovery feeds, and virtual try-on, all backed by a single canonical product c

DrUrls

DrUrls

DrUrls audits websites for SEO, and its MCP server lets Claude, ChatGPT, Claude Code, Cursor or VS Code work with those audits directly: list your sites with their latest score and grade, read each issue across SEO, perf

Testiny MCP server

Mategra GmbH

Testiny is a test case management platform. Its remote MCP server lets AI assistants such as Claude, ChatGPT, GitHub Copilot, Cursor and other MCP clients work directly with your Testiny data. Browse and search projects,

Yocoolab

Yocoolab

MCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools

1

Agent Conductor

icohangar-ops

Agent conductor — AGENTS.md contract parser, SKILL.md registry, CHP decision engine over MCP

広告掲載