Mcpsecurity

🚀 Vulnerable MCP Server

This project is a deliberately vulnerable MCP (Model Context Protocol) application created specifically for security research.

⚠️ Important Note

Do not use this in a production environment. This system executes raw SQL and system commands without authentication or restrictions.

🚀 Quick Start

✨ Features

• FastAPI for the HTTP interface.
• SQLite as the persistent database.
• Ollama LLM for interpreting natural language queries.
• JSON - RPC as the main API protocol.

This system routes natural language inputs to SQL queries or shell commands, implemented using a locally running LLM through Ollama. It is built to test SQL Injection (SQLi) and Remote Code Execution (RCE) vulnerabilities through FastAPI, JSON - RPC, and LLM - based decision logic.

⚠️ Security Notice

This application is deliberately designed to be insecure:

• ❗ No authentication or access control.
• ❗ Accepts and executes raw SQL queries and shell commands.
• ❗ No input validation.
• ❗ Blindly executes LLM responses.

Only use it in an isolated environment, CTF, or research laboratory.

✨ Features

• LLM - based decision logic for command routing (SQL or CLI).
• Native execution of SQL and terminal commands.
• Automatic initialization of the SQLite database with sample data.
• Simple and pluggable JSON - RPC methods.
• Deliberately vulnerable, suitable for offensive/defensive testing.

📦 Installation

git clone https://github.com/your-repo/mcp-vulnerable-app.git
cd mcp-vulnerable-app

docker-compose up --build
docker network connect mcplab ollama
docker network connect mcplab mcp_internal
docker network connect mcplab mcp_remote