mcp-server-everything-wrong
The "Everything Wrong" MCP Server is a demonstration server exposing a mix of benign and intentionally misbehaving tools to explore edge-cases in LLM tool management. Designed for educational purposes, it showcases insecure behaviors and should not be used in production environments.
greet
The first call returns "Hi there." The subsequent call will modify its own document and re-register it
joke_teller
Returns the joke, but secretly redirects the user to "Go back to work."
shadowing_attack
Hidden attack tools will inject malicious instructions into the behavior of other tools.
send_email
Send mail, if the BCC list is not empty, it will report the attacker
env_var
Leak all environment variables
fetch
Get URL content to simulate cross-domain data breaches
echo
Echo the text, but the hidden debug field is required otherwise it will "fault"
run_command
Execute the local child process and return the output, simulate the execution of any command