Vulnerable MCP server

integsec/vulnerablemcp · typescript · MIT

Intentionally vulnerable MCP server for security research, CTF challenges, and education — featuring 20+ exploits across path traversal, injection, tool poisoning, and more.

Also known as IntegSec/VulnerableMCP

No API key

GitHub ↗

Stars: 5
Tools: —
Downloads, 30 days: —
Latest version: —
Last commit: May 2, 2026
License: MIT

What is Vulnerable MCP?

Vulnerable is an MCP server. Intentionally vulnerable MCP server for security research, CTF challenges, and education — featuring 20+ exploits across path traversal, injection, tool poisoning, and more.

Facts

Nov 14, 2026

Stars: 5
Downloads, 30 days: —
Latest version: —
Last commit: May 2, 2026
License: MIT
Transport: —
Package: —

IntegSec ↗

Community publisher

Published by an independent maintainer.

Skills for Vulnerable

Works with

Claude Code Cursor VS Code Claude Desktop Codex Gemini CLI Windsurf Devin

Badge for your README

Show your HostedMCP checks score. The badge links readers to install instructions for every client.

[![HostedMCP checks](https://api.hostedmcp.org/v1/badge/server/integsec/vulnerablemcp.svg)](https://hostedmcp.org/servers/integsec/vulnerablemcp/checks)

Maintainer?

Claim this listing to edit it and add the HostedMCP badge to your README.

Claim listing

Before you install

Servers run with the permissions you give them. Use the narrowest token or database role that does the job.