VULNERABLE-MCP-SERVERS-LAB

Summary from the TLDR InfoSec newsletter

This repository contains a collection of intentionally vulnerable Model Context Protocol (MCP) server implementations for security training, covering common failure modes including path traversal, indirect prompt injection, eval-based RCE, namespace typosquatting, and secrets exposure. Each server includes documentation on exploitation techniques, supporting hands-on training for pentesters learning AI agent security and MCP integration risks. Intended for isolated lab environments only.