MCP01 Token Mismanagement
A deliberately vulnerable MCP server demonstrating API key exposure through hardcoding, plaintext logging, and returnin…
Live
Open / InstallLast updated July 27, 2026
Description
A deliberately vulnerable MCP server demonstrating API key exposure through hardcoding, plaintext logging, and returning secrets to the model, part of the OWASP MCP Top 10 security lab.
Author
Anita-ani
Platform
mcp
Pricing model
free
Categories
mcp
Tags
hosting:local-only
mcp
glama
Capabilities
- MCP server