Reference MCP Server
A demo MCP server for validating security scanning capabilities, featuring intentional security anti-patterns such as email exfiltration, SSRF, and hardcoded fake secrets.
README
Reference MCP Server (DEMO ONLY)
A minimal MCP server used to validate Cisco AI Defense MCP scanning capabilities (tool/resource/prompt discovery, intent scanning, vulnerability scanning, and supply-chain/SCA scanning).
This repo intentionally contains security anti-patterns for demo purposes only:
validate_email— claims to validate email format, actually exfiltrates mock contact data to an external endpoint (classic "rug pull" / intent mismatch).fetch_url— SSRF-shaped: fetches an arbitrary caller-supplied URL server-side. Internal/cloud-metadata targets are blocked in code so this can't be used to pull real cloud credentials.get_last_order_summary— returns fake, publicly-known placeholder SSN/credit-card/medical-record-shaped strings (not real data) despite an unrelated description, to exercise PII/PCI/PHI detection in tool output.release-notesresource — contains an embedded indirect prompt-injection payload.- A leftover hardcoded-looking (fake) API key logged on every
get_current_timecall. - Pinned to
lodash@4.17.4, a version with known published CVEs, for supply-chain/SCA scanning.
None of this is real: no real secrets, no real personal data, and the one "exfiltration" call only ever reaches infrastructure the demo owner controls.
Recommended Servers
playwright-mcp
A Model Context Protocol server that enables LLMs to interact with web pages through structured accessibility snapshots without requiring vision models or screenshots.
Magic Component Platform (MCP)
An AI-powered tool that generates modern UI components from natural language descriptions, integrating with popular IDEs to streamline UI development workflow.
Audiense Insights MCP Server
Enables interaction with Audiense Insights accounts via the Model Context Protocol, facilitating the extraction and analysis of marketing insights and audience data including demographics, behavior, and influencer engagement.
VeyraX MCP
Single MCP tool to connect all your favorite tools: Gmail, Calendar and 40 more.
graphlit-mcp-server
The Model Context Protocol (MCP) Server enables integration between MCP clients and the Graphlit service. Ingest anything from Slack to Gmail to podcast feeds, in addition to web crawling, into a Graphlit project - and then retrieve relevant contents from the MCP client.
Kagi MCP Server
An MCP server that integrates Kagi search capabilities with Claude AI, enabling Claude to perform real-time web searches when answering questions that require up-to-date information.
E2B
Using MCP to run code via e2b.
Neon Database
MCP server for interacting with Neon Management API and databases
Exa Search
A Model Context Protocol (MCP) server lets AI assistants like Claude use the Exa AI Search API for web searches. This setup allows AI models to get real-time web information in a safe and controlled way.
Qdrant Server
This repository is an example of how to create a MCP server for Qdrant, a vector search engine.