MCPGoat

active

Deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-command Docker deploy. Practice penetration testing against the Model Context Protocol.

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Repository: github.com/SabyasachiDhal/MCPGoat
License: MIT
Last update: 2026-08-17
GitHub stars: ★ 12
Homepage: sabyasachidhal.github.io/MCPGoat/

ai-security appsec capture-the-flag ctf llm-security mcp mcp-security mcp-server model-context-protocol pentesting prompt-injection security-training

Listed in

github · source

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.