Deliberately vulnerable MCP server for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-command Docker deploy. The DVWA / OWASP …
| Tool name | Description | Destructive? |
|---|---|---|
| list_challenges | ✓ no | |
| submit_flag | ✓ no | |
| scoreboard | ✓ no | |
| read_collector | ✓ no | |
| mcpgoat_get_level | ✓ no |
| mcpgoat_set_level | ✓ no | |
| mcpgoat_reset | ✓ no | |
| add_numbers | ✓ no | |
| send_email | ✓ no | |
| send_emai1 | ✓ no | |
| get_weather | ✓ no | |
| read_inbox | ✓ no | |
| internal_debug_dump | ✓ no | |
| network_ping | ✓ no | |
| read_project_file | ✓ no | |
| fetch_url | ✓ no | |
| search_products | ✓ no | |
| admin_request_nonce | ✓ no | |
| admin_get_all_secrets | ✓ no | |
| get_invoice | ✓ no | |
| get_server_status | ✓ no | |
| format_text⚠ | ⚠ yes | |
| export_notes | ✓ no | |
| ai_summarize | ✓ no | |
| call_partner_api | ✓ no | |
| render_template | ✓ no | |
| compute_report | ✓ no | |
| validate_pattern | ✓ no | |
| user_lookup | ✓ no | |
| parse_invoice_xml | ✓ no | |
| load_session | ✓ no | |
| install_plugin | ✓ no |