MCP Poisoning Attack - PoC
This repository demonstrates a variety of **MCP Poisoning Attacks** affecting real-world AI agent workflows.
wbfoss
README
MCP Poisoning Attack - PoC
This repository demonstrates a variety of MCP Poisoning Attacks affecting real-world AI agent workflows.
✅ Covered Scenarios
- Code Generation Poisoning
- Financial Report Exfiltration
- Competitor Analysis Data Leak
- Meeting Transcript Leaks
- Code Review Exfiltration
- Cross-Server Shadowing Attack
⚡ Setup
pip install -r requirements.txt
💥 Running the PoC
1️⃣ Start the fake MCP server:
python fake_mcp_server.py
2️⃣ In another terminal, run the agent simulation:
python agent_poc.py
☠️ Impact
- Silent data exfiltration
- Cross-tool hijacking
- No visible clue to the user
License
Apache 2.0 - For educational and research use only.
Recommended Servers
Sequential Thinking MCP Server
This server facilitates structured problem-solving by breaking down complex issues into sequential steps, supporting revisions, and enabling multiple solution paths through full MCP integration.
Crypto Price & Market Analysis MCP Server
A Model Context Protocol (MCP) server that provides comprehensive cryptocurrency analysis using the CoinCap API. This server offers real-time price data, market analysis, and historical trends through an easy-to-use interface.
MCP PubMed Search
Server to search PubMed (PubMed is a free, online database that allows users to search for biomedical and life sciences literature). I have created on a day MCP came out but was on vacation, I saw someone post similar server in your DB, but figured to post mine.
dbt Semantic Layer MCP Server
A server that enables querying the dbt Semantic Layer through natural language conversations with Claude Desktop and other AI assistants, allowing users to discover metrics, create queries, analyze data, and visualize results.
mixpanel
Connect to your Mixpanel data. Query events, retention, and funnel data from Mixpanel analytics.
Vectorize
Vectorize MCP server for advanced retrieval, Private Deep Research, Anything-to-Markdown file extraction and text chunking.
Nefino MCP Server
Provides large language models with access to news and information about renewable energy projects in Germany, allowing filtering by location, topic (solar, wind, hydrogen), and date range.
MATLAB MCP Server
Integrates MATLAB with AI to execute code, generate scripts from natural language, and access MATLAB documentation seamlessly.
Macrostrat MCP Server
Enables Claude to query comprehensive geologic data from the Macrostrat API, including geologic units, columns, minerals, and timescales through natural language.
MCP Word Counter
A Model Context Protocol server that provides tools for analyzing text documents, including counting words and characters. This server helps LLMs perform text analysis tasks by exposing simple document statistics functionality.