Insecure MCP Demo

@kenhuangus

代码仓库

基本信息

分类

其他

传输方式

stdio

作者

kenhuangus

关于 Insecure MCP Demo

暂无概览

Insecure MCP Demo 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "mcp-vulnerable-server-demo": {
      "command": "python",
      "args": [
        "good-mcp-client.py",
        "vuln-mcp.py"
      ]
    }
  }
}

Insecure MCP Demo 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Insecure MCP Demo?

Insecure MCP Demo is an educational project that demonstrates a deliberately vulnerable MCP server along with both a good client and a proof‑of‑concept attack client. It is designed to showcase common security vulnerabilities in MCP servers and to teach secure implementation practices.

How to use Insecure MCP Demo?

Install the Python dependencies with pip install -r requirements.txt. Start the server and good client by running python good-mcp-client.py vuln-mcp.py in one terminal. Run the attack client with python attack-mcp-client.py vuln-mcp.py in another terminal to see automatic exploitation of the vulnerabilities.

Key features of Insecure MCP Demo

Vulnerable server exposes four insecure tools.
insert_record tool is prone to SQL injection.
query_records tool exposes all data without authentication.
execute_sql tool allows arbitrary SQL commands.
get_env_variable tool leaks sensitive environment variables.
Includes both a good client and an automated attack client.

Use cases of Insecure MCP Demo

Teaching developers how SQL injection works in an MCP context.
Demonstrating the dangers of exposing arbitrary SQL execution tools.
Showing how unauthenticated data access can leak sensitive records.
Training security professionals on MCP server weaknesses.

常见问题

What is the purpose of this project?

The project demonstrates a vulnerable MCP server with multiple clients for educational purposes, highlighting potential security vulnerabilities and how they can be exploited.

What vulnerabilities are demonstrated?

The server showcases SQL injection, arbitrary code execution (via `execute_sql`), sensitive data exposure (via `get_env_variable`), and lack of access control.

How can I run the attack client?

Open a second terminal and run `python attack-mcp-client.py vuln-mcp.py` after installing the dependencies. The client will automatically attempt SQL injection, execute arbitrary SQL queries, and read common environment variables.

Is this server safe to use in production?

No. The README explicitly states, “Do not deploy this code in production environments.” It is intended only for education and demonstration.

What mitigation strategies does the project recommend?

The README suggests using parameterized queries, restricting dangerous tools, implementing authentication and authorization, validating input, limiting environment variable access, auditing usage, and applying the principle of least privilege.

其他分类下的更多 MCP 服务器

Blender

ahujasid

Open-source MCP to use Blender with any LLM

23.6K

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

The Living Bread

A free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w

Activepieces

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

23.2K