1. Conduid
  2. Documentation
  3. Objauthz Lab
MCP server · Documentation

Objauthz Lab

by · github.com/WRG-11/mcp-objauthz-lab

Vulnerable-by-design MCP server for learning object-level / cross-tenant authorization (BOLA/IDOR) bugs, plus Semgrep rules that find the same shapes in JavaScript/TypeScript, Python, Go, Rust, Java, Kotlin, C#, PHP, Ruby and Swift MCP servers - shipped as a GitHub Action with SARIF output.

Unclaimed ai-securitybolabroken-object-level-authorizationcsharpgolangidorjavakotlinllm-securitymcpmcp-securitymodel-context-protocolphprubyrustsarifsastsemgrepswiftvulnerable-by-design
InstallView source
34Low

Scored 21 days ago · breakdown

About Objauthz Lab

Objauthz Lab is an MCP server published by WRG-11 in the Documentation category: vulnerable-by-design MCP server for learning object-level / cross-tenant authorization (BOLA/IDOR) bugs, plus Semgrep rules that find the same shapes in JavaScript/TypeScript, Python, Go, Rust, Java, Kotlin, C#, PHP, Ruby and Swift MCP servers - shipped as a GitHub Action with SARIF output.

Install

From source
git clone https://github.com/WRG-11/mcp-objauthz-lab

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Objauthz Lab

Powered by Claude · Grounded in docs

I know everything about Objauthz Lab. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Objauthz Lab

How do I install Objauthz Lab?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Objauthz Lab safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Objauthz Lab still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.