vulnerable-mcp-servers-lab

Name: appsecco/vulnerable-mcp-servers-lab
Author: appsecco

View on GitHub

A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

MCP Servers268 stars52 forks● JavaScriptMITUpdated 7mo ago

ClaudeWave Trust Score

87/100

✓ Trusted

Passed

✓Open-source license (MIT)
✓Healthy fork ratio
✓Clear description
✓Topics declared

Last scanned: 6/11/2026

Install in Claude Code / Claude Desktop

Method: Manual

Claude Code CLI

git clone https://github.com/appsecco/vulnerable-mcp-servers-lab

claude_desktop_config.json (Claude Desktop)

{
  "mcpServers": {
    "vulnerable-mcp-servers-lab": {
      "command": "node",
      "args": ["/path/to/vulnerable-mcp-servers-lab/dist/index.js"]
    }
  }
}

1. Run the command above in your terminal (Claude Code), or paste the JSON config into claude_desktop_config.json (Claude Desktop).

2. Replace any <placeholder> values with your API keys or paths.

3. Restart Claude. The MCP server and its tools appear automatically.

💡 Clone https://github.com/appsecco/vulnerable-mcp-servers-lab and follow its README for install instructions.

Use cases

Dev Tools Research Security

About

MCP Servers overview

README preview not available. Visit the repo on GitHub for full documentation.

Topics

ai-red-teamingai-researchappseccobugbountyhackinglearning-pentestingmcpmcp-clientmcp-serverpentestingvulnerable-labs

Frequently asked

What people ask about vulnerable-mcp-servers-lab

What is appsecco/vulnerable-mcp-servers-lab?

appsecco/vulnerable-mcp-servers-lab is mcp servers for the Claude AI ecosystem. A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers. It has 268 GitHub stars and was last updated 7mo ago.

How do I install vulnerable-mcp-servers-lab?

You can install vulnerable-mcp-servers-lab by cloning the repository (https://github.com/appsecco/vulnerable-mcp-servers-lab) or following the README instructions on GitHub. ClaudeWave also provides quick install blocks on this page.

Is appsecco/vulnerable-mcp-servers-lab safe to use?

Our security agent has analyzed appsecco/vulnerable-mcp-servers-lab and assigned a Trust Score of 87/100 (tier: Trusted). See the full breakdown of passed checks and flags on this page.

Who maintains appsecco/vulnerable-mcp-servers-lab?

appsecco/vulnerable-mcp-servers-lab is maintained by appsecco. The last recorded GitHub activity is from 7mo ago, with 1 open issues.

Are there alternatives to vulnerable-mcp-servers-lab?

Yes. On ClaudeWave you can browse similar mcp servers at /categories/mcp, sorted by popularity or recent activity.

1-click deploy

Deploy vulnerable-mcp-servers-lab to your cloud

Ship this repo to production in minutes. Each platform spins up its own environment with editable env vars.

Vercel Railway Render

Embeddable badge

Maintain this repo? Add a badge to your README

Drop the badge into your GitHub README to show it's tracked on ClaudeWave. Each badge links back to this page and reflects the live Trust Score.

Markdown (README)

[![Featured on ClaudeWave](https://claudewave.com/api/badge/appsecco-vulnerable-mcp-servers-lab)](https://claudewave.com/repo/appsecco-vulnerable-mcp-servers-lab)

HTML

<a href="https://claudewave.com/repo/appsecco-vulnerable-mcp-servers-lab"><img src="https://claudewave.com/api/badge/appsecco-vulnerable-mcp-servers-lab" alt="Featured on ClaudeWave: appsecco/vulnerable-mcp-servers-lab" width="320" height="64" /></a>

More MCP Servers

n8n-io

n8n

today

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

198.5k59.7kTypeScript

MCP ServersaiapisInstall

open-webui

yesterday

User-friendly AI Interface (Supports Ollama, OpenAI API, ...)

147.1k21.4kPython

MCP ServersaillmInstall

google-gemini

gemini-cli

today

An open-source AI agent that brings the power of Gemini directly into your terminal.

106.2k14.3kTypeScript

MCP Serversaiai-agentsInstall

netdata

today

The fastest path to AI-powered full stack observability, even for lean teams.

79.9k6.5kGo

MCP ServersaialertingInstall

koala73

worldmonitor

today

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

76k11.4kTypeScript

MCP ServersagentaiInstall

D4Vinci

Scrapling

yesterday

🕷️ An adaptive Web Scraping framework that handles everything from a single request to a full-scale crawl!

71.7k7.1kPython

MCP Serversaiai-scrapingInstall