MCP servers tagged vulnerable-by-design

2 live MCP servers tagged "vulnerable-by-design", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with vulnerable-by-design.

live servers

avg trust

most stars

Brokenbazaar

ddbatista

Deliberately vulnerable AI agent marketplace — the full Product Security lifecycle: threat model → attack → defend → regression test → detect. MCP + Agent Skills supply chain.

★ 1

Objauthz Lab

WRG-11

Vulnerable-by-design MCP server for learning object-level / cross-tenant authorization (BOLA/IDOR) bugs, plus Semgrep rules that find the same shapes in JavaScript/TypeScript, Pyt…