# Damn Vulnerable Model Context Protocol (DVMCP)

> Use this tool when you need to simulate and demonstrate security vulnerabilities in model context protocols, such as prompt injection and code execution, to train security researchers and AI safety professionals. The DVMCP provides a deliberately vulnerable MCP server to test and educate on various security risks. It is ideal for educational and training purposes, allowing users to input simulated attacks and observe the outputs and potential consequences.

Canonical page: https://skillsregistry.net/skills/harishsg993010-damn-vulnerable-mcp-server  
JSON: https://api.skillsregistry.net/v1/skills/harishsg993010-damn-vulnerable-mcp-server

## Description

An educational project that deliberately implements vulnerable MCP servers to demonstrate various security risks like prompt injection, tool poisoning, and code execution for training security researchers and AI safety professionals.

## Trust

- **Trust score (0–1):** 0.24
- **Verification tier:** scanned
- **Last scanned:** 2026-09-19

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** mcp-remote
- **Runtime environment:** api
- **Category:** ai-ml
- **Updated:** 2026-09-19

## Source

- **Source listing:** [Glama](https://glama.ai/mcp/servers/fgkvpu5v2n)
- **Repository:** <https://github.com/harishsg993010/damn-vulnerable-MCP-server>

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "harishsg993010-damn-vulnerable-mcp-server"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/harishsg993010-damn-vulnerable-mcp-server` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/harishsg993010-damn-vulnerable-mcp-server/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt