About mcp-security-sandbox
An experimental lab for exploring MCP hosts, clients, and servers, with a chat playground that combines an MCP server and an agent. It is intended for security experimentation, including attacks against servers and LLMs.
Key features
- 01Experiment with MCP hosts, clients, and servers
- 02Explore MCP-aware chat with retrieval
- 03Integrate a GitHub retrieval server
- 04Use a malicious server in experiments
Use cases
- 01Explore interactions between MCP components
- 02Test retrieval in an MCP-enabled chat playground
- 03Experiment with malicious server behavior
- 04Investigate attacks on MCP servers and LLMs
MCP support
The project includes a GitHub retrieval MCP server integrated into a chat agent playground, and describes using multiple MCP servers together. Its stated focus includes experimentation with attacks and vulnerabilities.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
We haven’t collected a package or remote endpoint for this server. Follow the instructions in the project README.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project READMEmcp-security-sandbox
An experimental sandbox and a lab to explore mcp hosts, mcp clients, and mcp servers. Perform attacks agaisnt mcp servers and abuse LLMs
Preview
MCP Aware Chat - retrieval
This repository defines an MCP server(github retrieval), and integrate it into a chat agent playground.
Burp Suite MCP Server
Use to chain and interact with multiple MCP servers, in this example, we've enabled intercept and performed a revtrieval using the github tool to describe this repository!
note: install Burps MCP Server first
Quick Start
to start the frontend:
uv install
uv venv
source .venv/bin/activate
# Start he MCP serer
uv run -- src/mcp-security-sandbox/mcp/github/server.py
streamlit run src/mcp-security-sandbox/frontend/MCP_Chat.py
make sure you install ollama, and set it's url in the ollama client initializations
Roadmap
- use the environment to setup the ollama api
- integrate mcp into the chat context(currently it's history aware only)
- Allow for streamlit pages/navigation
- unify streamlit server(s) to initiate all of the frontend once
- add more mcp servers
- allow for dynamically loading of mcp servers
- create a malicious server
- perfrom mcp attacks and poc vulnerabilities
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.