appsecco / MCP Servers

vulnerable-mcp-servers-lab

Name: appsecco/vulnerable-mcp-servers-lab
Author: appsecco

A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

280 stars
58 forks
1 open issues
Language: JavaScript
License: MIT
updated 10mo ago

Install

Claude Code CLI

git clone https://github.com/appsecco/vulnerable-mcp-servers-lab

claude_desktop_config.json

{
  "mcpServers": {
    "vulnerable-mcp-servers-lab": {
      "command": "node",
      "args": ["/path/to/vulnerable-mcp-servers-lab/dist/index.js"]
    }
  }
}

~/.cursor/mcp.json

{
  "mcpServers": {
    "vulnerable-mcp-servers-lab": {
      "command": "node",
      "args": ["/path/to/vulnerable-mcp-servers-lab/dist/index.js"]
    }
  }
}

Run the command above in your terminal (Claude Code), or paste the JSON config into claude_desktop_config.json (Claude Desktop).
Replace any <placeholder> values with your API keys or paths.
Restart Claude. The MCP server and its tools appear automatically.

Clone https://github.com/appsecco/vulnerable-mcp-servers-lab and follow its README for install instructions.

README

MCP Servers overview

README preview not available. Visit the repo on GitHub for full documentation.

Use cases

Dev Tools Research Security

Topics

ai-red-teamingai-researchappseccobugbountyhackinglearning-pentestingmcpmcp-clientmcp-serverpentestingvulnerable-labs

Frequently asked

What people ask about vulnerable-mcp-servers-lab

What is appsecco/vulnerable-mcp-servers-lab?

appsecco/vulnerable-mcp-servers-lab is mcp servers for the Claude AI ecosystem. A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers. It has 280 GitHub stars and its last recorded update is dated 2025-12-18.

How do I install vulnerable-mcp-servers-lab?

You can install vulnerable-mcp-servers-lab by cloning the repository (https://github.com/appsecco/vulnerable-mcp-servers-lab) or following the README instructions on GitHub. ClaudeWave also provides quick install blocks on this page.

Is appsecco/vulnerable-mcp-servers-lab safe to use?

Our security agent has analyzed appsecco/vulnerable-mcp-servers-lab and assigned a Trust Score of 77/100 (tier: Trusted). See the full breakdown of passed checks and flags on this page.

Who maintains appsecco/vulnerable-mcp-servers-lab?

appsecco/vulnerable-mcp-servers-lab is maintained by appsecco. The last recorded GitHub activity is dated 2025-12-18, with 1 open issues.

Are there alternatives to vulnerable-mcp-servers-lab?

Yes. On ClaudeWave you can browse similar mcp servers at /categories/mcp, sorted by popularity or recent activity.