What are the runtime requirements?

It requires Python 3.8+ and standard dependencies listed in `requirements.txt`. No external MCP server runtime is needed.

Is this project safe to use in production?

No; it contains attack code meant for controlled environments only. The README explicitly warns against malicious use and encourages defensive focus.

SSyncDev

Start a project

MCP Poisoning Attack MCP Server

This repository demonstrates a variety of **MCP Poisoning Attacks** affecting real-world AI agent workflows.

Local serverstdioPython

What is the MCP Poisoning Attack MCP Server?

This repository demonstrates a variety of MCP Poisoning Attacks affecting real-world AI agent workflows.

What you get

GenSecAI is A non-profit community using generative AI to defend against AI-powered attacks, building open-source tools to secure our digital future from emerging AI threats.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Example prompts to try

“Use MCP Poisoning Attack to Organization.”
“Use MCP Poisoning Attack to Website.”
“Use MCP Poisoning Attack to Installation.”

Frequently asked questions

This is a security research project by GenSecAI that demonstrates and defends against MCP tool poisoning vulnerabilities for educational and defensive use only.