vulnerable-mcp-servers-lab vs everything
Side-by-side comparison to help you pick between these two MCP servers.
vulnerable-mcp-servers-lab by appsecco | everything by modelcontextprotocol | |
|---|---|---|
| Stars | ★ 256 | ★ 85,748 |
| 30d uses | — | — |
| Score | 48 | 77 |
| Official | — | ✓ |
| Categories | SecurityAI / LLM ToolsDeveloper Tools | Developer ToolsAI / LLM ToolsOther |
| Language | JavaScript | TypeScript |
| Last commit | 5 mo ago | this month |
vulnerable-mcp-servers-lab · Summary
A collection of intentionally vulnerable MCP servers for security training and research into common attack vectors.
everything · Summary
Official MCP test server exercising all protocol features for client builders.
vulnerable-mcp-servers-lab · Use cases
- Security research on MCP server vulnerabilities
- Hands-on training for AI penetration testing
- Developing security tests for AI applications
everything · Use cases
- Testing MCP client implementations against all protocol features
- Learning MCP protocol capabilities through a reference server
- Validating client compatibility with different transport methods
vulnerable-mcp-servers-lab · Install
Each vulnerable server lives in its own directory with specific installation instructions. To use:
- Clone the repository:
git clone https://github.com/appsecco/vulnerable-mcp-servers-lab.git - Navigate to the specific vulnerable server directory (e.g.,
cd vulnerable-mcp-server-filesystem-workspace-actions) - Follow the README instructions in that directory
For Claude Desktop integration, many servers include a claude_config.json snippet that should be merged into your Claude Desktop configuration. For example:
{
"mcpServers": {
"vulnerable-filesystem": {
"command": "node",
"args": ["index.js"]
}
}
}everything · Install
NPX (recommended)
{
"mcpServers": {
"everything": {
"command": "npx",
"args": ["-y", "@modelcontextprotocol/server-everything"]
}
}
}On Windows, use cmd /c:
{
"mcpServers": {
"everything": {
"command": "cmd",
"args": ["/c", "npx", "-y", "@modelcontextprotocol/server-everything"]
}
}
}Docker
{
"mcpServers": {
"everything": {
"command": "docker",
"args": ["run", "-i", "--rm", "mcp/everything"]
}
}
}Global install
npm install -g @modelcontextprotocol/server-everything@latest
npx @modelcontextprotocol/server-everything