mcp-trust-demo

by SteveMonsway · security · mcp-server, glama

An intentionally vulnerable MCP server designed as a live demo target for the MCP Trust security scanner. It contains deliberate insecure patterns to demonstrate scanning capabilities.

Source: https://github.com/SteveMonsway/mcp-trust-demo

Install

git clone https://github.com/SteveMonsway/mcp-trust-demo

Tags: mcp-server, glama

Source: glama

About security MCP servers and Claude skills

Security MCP servers let agents scan dependencies, audit logs, check for vulnerabilities, and enforce policy guardrails. Critical for any agent that touches production.

mcp-trust-demo is one of hundreds of security entries indexed on Skiln. Browse the full security category or the complete directory of Claude skills, MCP servers, agents, commands, and hooks.

Related security MCPs and skills

  • AegisQuery by siddhashutosh

    A governed analytics MCP server that provides LLM agents with safe, read-only access to data warehouses through a layered safety pipeline including AST validation, column/row governance, PII masking, cost limits, and audit.

  • Meridian Bank MCP Server by saivarmadpr

    A production-grade MCP server for a fictional digital bank, exposing tools for an AI copilot to service customers across the full risk spectrum from read-only lookups to money movement and destructive admin actions, with OAuth 2.1 security and a realistic dataset.

  • Toxy Insecure MCP Lab by toxicaj

    An intentionally vulnerable MCP server for security education, demonstrating flaws like missing auth, SSRF, SQLi, and file system abuse.

  • Lucid Lineage GraphRAG MCP by raul-villar-ai

    Exposes six Neo4j graph tools for tracing data lineage, checking compliance boundaries, and managing audit findings in a simulated infrastructure sandbox.

  • Dynamis by Santiagociroc11

    MCP server for the DYNAMIS doctrine system, providing access to expert knowledge on launches and sales, including resources for indices, skills, tensions, and tools for searching, auditing, and benchmarking.

  • Corporate Tools MCP Server by Oumeima-IbnElfekih

    Enables AI agents to search HR policies, create IT support tickets, and send external emails with configurable security levels and human-in-the-loop validation.

  • governed-mcp by rsiraj0

    MCP server that enforces governance on agentic decisions with auditable evidence records, providing tools for understanding, calibrating confidence, and navigating handoffs based on policy.

  • mcp_socket_server by weihang1258

    An MCP server that bridges LLM platforms with multiple socket_server targets, enabling batch parallel execution of packet capture, dial testing, command, and file operations with authentication, auditing, and status locking.

Frequently asked questions

How do I install mcp-trust-demo?

Add the install command above to your Claude Code, Cursor, or Windsurf MCP configuration. Most servers register via npx, a local command, or a Docker image. Refer to the source repository for environment variables and credential requirements.

Which clients support mcp-trust-demo?

Any MCP-compatible client works: Claude Desktop, Claude Code CLI, Cursor, Windsurf, Zed, and VS Code with the official MCP extension. OpenAI Codex and GitHub Copilot increasingly support MCP via adapter bridges.

Is mcp-trust-demo free?

The server itself is typically open source. Any upstream service (API keys, paid tiers, hosted infrastructure) may have its own pricing. Check the source repository for details.