Damn Vulnerable Model Context Protocol (DVMCP)

@harishsg993010

About Damn Vulnerable Model Context Protocol (DVMCP)

Damn Vulnerable MCP Server

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "damn-vulnerable-MCP-server": {
      "command": "docker",
      "args": [
        "build",
        "-t",
        "dvmcp",
        "."
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Damn Vulnerable Model Context Protocol (DVMCP)?

Damn Vulnerable Model Context Protocol (DVMCP) is a deliberately vulnerable MCP server with 10 security challenges of increasing difficulty. It is designed for security researchers, developers, and AI safety professionals to learn about vulnerabilities in MCP implementations.

How to use Damn Vulnerable Model Context Protocol (DVMCP)?

Clone the repository, then run docker build -t dvmcp . and docker run -p 9001-9010:9001-9010 dvmcp to start the lab. Connect using a remote MCP client like CLINE for VSCode; challenge solutions are available in the solutions directory.

Key features of Damn Vulnerable Model Context Protocol (DVMCP)

10 challenges across three difficulty levels (easy, medium, hard)
Covers vulnerabilities like Prompt Injection, Tool Poisoning, and Remote Access Control
Docker-based environment for simple setup and isolation
Educational project focused on MCP security risks and mitigations
Solution guides included for self-assessment

Use cases of Damn Vulnerable Model Context Protocol (DVMCP)

Security researchers studying MCP attack vectors and defenses
Developers testing and hardening their MCP implementations
AI safety professionals analyzing prompt injection and tool poisoning
Cybersecurity training exercises and Capture The Flag events

FAQ from Damn Vulnerable Model Context Protocol (DVMCP)

What is Damn Vulnerable Model Context Protocol (DVMCP)?

A deliberately vulnerable MCP server containing 10 educational challenges that demonstrate common security vulnerabilities in MCP implementations.

How do I run Damn Vulnerable Model Context Protocol (DVMCP)?

Build and run with Docker: docker build -t dvmcp . followed by docker run -p 9001-9010:9001-9010 dvmcp. A Linux environment is

Frequently asked questions

What is Damn Vulnerable Model Context Protocol (DVMCP)?

A deliberately vulnerable MCP server containing 10 educational challenges that demonstrate common security vulnerabilities in MCP implementations.

How do I run Damn Vulnerable Model Context Protocol (DVMCP)?

Build and run with Docker: `docker build -t dvmcp .` followed by `docker run -p 9001-9010:9001-9010 dvmcp`. A Linux environment is

Comments

Basic information

More Other MCP servers

Activepieces

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

23.2K

Peekaboo MCP – lightning-fast macOS screenshots for AI agents

steipete

Peekaboo is a macOS CLI & optional MCP server that enables AI agents to capture screenshots of applications, or the entire system, with optional visual question answering through local or remote AI models.

4.8K

IDA Pro MCP

mrexodia

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

9.9K

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.

ghidraMCP

LaurieWired

MCP Server for Ghidra

9.4K