Advertise
MCP.so
Sign In

Damn Vulnerable MCP (DVMCP)

@harishsg993010

Repository

Basic information

Category

Other

Last updated

Transports

stdio

Author

harishsg993010

About Damn Vulnerable MCP

Damn Vulnerable MCP Server

Damn Vulnerable MCP config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "damn-vulnerable-MCP-server": {
      "command": "docker",
      "args": [
        "build",
        "-t",
        "dvmcp",
        "."
      ]
    }
  }
}

Damn Vulnerable MCP tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Damn Vulnerable Model Context Protocol (DVMCP)?

Damn Vulnerable Model Context Protocol (DVMCP) is a deliberately vulnerable MCP server with 10 security challenges of increasing difficulty. It is designed for security researchers, developers, and AI safety professionals to learn about vulnerabilities in MCP implementations.

How to use Damn Vulnerable Model Context Protocol (DVMCP)?

Clone the repository, then run docker build -t dvmcp . and docker run -p 9001-9010:9001-9010 dvmcp to start the lab. Connect using a remote MCP client like CLINE for VSCode; challenge solutions are available in the solutions directory.

Key features of Damn Vulnerable Model Context Protocol (DVMCP)

  • 10 challenges across three difficulty levels (easy, medium, hard)
  • Covers vulnerabilities like Prompt Injection, Tool Poisoning, and Remote Access Control
  • Docker-based environment for simple setup and isolation
  • Educational project focused on MCP security risks and mitigations
  • Solution guides included for self-assessment

Use cases of Damn Vulnerable Model Context Protocol (DVMCP)

  • Security researchers studying MCP attack vectors and defenses
  • Developers testing and hardening their MCP implementations
  • AI safety professionals analyzing prompt injection and tool poisoning
  • Cybersecurity training exercises and Capture The Flag events

Frequently asked questions

1

What is Damn Vulnerable Model Context Protocol (DVMCP)?

A deliberately vulnerable MCP server containing 10 educational challenges that demonstrate common security vulnerabilities in MCP implementations.

2

How do I run Damn Vulnerable Model Context Protocol (DVMCP)?

Build and run with Docker: `docker build -t dvmcp .` followed by `docker run -p 9001-9010:9001-9010 dvmcp`. A Linux environment is

Comments

More Other MCP servers

Klarix Intelligence Engine

Klarix

B2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.

Sequential Thinking

modelcontextprotocol

Model Context Protocol Servers

88.2K

Lemon.io

lemon-io

Request dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3

Soar Flight Booking MCP

Soar Flight Booking MCP is a remote MCP server available at https://mcp.soar.flights.

Volley.sh

Volley

A good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi

Advertise