1. Conduid
  2. Blockchain
  3. Mcpbait
MCP server · Blockchain

Mcpbait

by · github.com/jankesec/mcpbait

Red teaming framework that proves whether an MCP-speaking agent can be hijacked by a malicious server

Unclaimed agent-securityai-securityllm-securitymcpmodel-context-protocoloffensive-securityprompt-injectionred-teamsecurity-tools
InstallView source
34Low

Scored 28 days ago · breakdown

About Mcpbait

Mcpbait is an MCP server published by jankesec in the Blockchain category: red teaming framework that proves whether an MCP-speaking agent can be hijacked by a malicious server.

The repository has 1 stars and 0 forks, with the last commit a month ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/jankesec/mcpbait

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Mcpbait

Powered by Claude · Grounded in docs

I know everything about Mcpbait. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.2.0v0.2.0 - Matrix Benchmarks, DevSecOps SARIF & 1-Click Client Integrator · 3 Sep 2026🚀 What's New in v0.2.0 1. Multi-Model Benchmark Matrix (`mcpbait matrix`) Benchmark multiple models/agents in a single execution (`--models gpt-4o,claude-3-5-sonnet`). Automated comparative Leaderboard generation in Rich terminal tables,…
v0.1.0v0.1.0 · 31 Aug 2026First release. mcpbait runs as a malicious MCP server, lets your agent do ordinary work, and shows you the kill chain with evidence attached. The adversary and the verifier are the same process, so an exfiltrated canary comes back as an…
Questions

About Mcpbait

How do I install Mcpbait?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Mcpbait safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Mcpbait still maintained?

Yes — the latest release is v0.2.0 (3 Sep 2026), and the last commit was a month ago. The repository has 1 stars.