Vulnerable MCP Server

What is Vulnerable MCP Server?

An intentionally vulnerable MCP (Model Context Protocol) application designed for security research. It combines FastAPI, SQLite, a local Ollama LLM, and JSON-RPC to route natural language inputs to SQL queries or shell commands, enabling testing of SQL injection (SQLi) and remote code execution (RCE) vulnerabilities.

How to use Vulnerable MCP Server?

Clone the repository, run docker-compose up --build, then connect the Ollama and MCP containers to the same Docker network using docker network connect mcplab ollama and docker network connect mcplab mcp_internal and docker network connect mcplab mcp_remote. The server starts with an auto-initializing SQLite database and exposes JSON-RPC methods.

Key features of Vulnerable MCP Server

• LLM-based decision logic for command routing (SQL or CLI)
• Native execution of SQL and terminal commands
• Auto-initializing SQLite database with sample data
• Simple, pluggable JSON-RPC methods
• Vulnerable by design — suitable for offensive/defensive testing

Use cases of Vulnerable MCP Server

• Testing SQL injection (SQLi) in a controlled environment
• Testing remote code execution (RCE) via command injection
• Building capture-the-flag (CTF) challenges or security labs
• Evaluating LLM-based decision logic for security misuses