1. Conduid
  2. Science
  3. MCPGoat
MCP server · Science

MCPGoat

· github.com/SabyasachiDhal/MCPGoat

Deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-command Docker deploy. Practice penetration testing against the Model Context Protocol.

Unclaimed ai-securityappseccapture-the-flagctfllm-securitymcpmcp-securitymcp-servermodel-context-protocolpentestingprompt-injectionsecurity-trainingvulnerable-appvulnerable-mcp
InstallView source
34Low

Scored a month ago · breakdown

About MCPGoat

MCPGoat is an MCP server in the Science category: deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-command Docker deploy. Practice penetration testing against the Model Context Protocol.

Install

From source
git clone https://github.com/SabyasachiDhal/MCPGoat

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about MCPGoat

Powered by Claude · Grounded in docs

I know everything about MCPGoat. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About MCPGoat

How do I install MCPGoat?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is MCPGoat safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is MCPGoat still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.