MCP_TOOL_POISONING_ATTACKS
About
A Node.js project demonstrating MCP client and server interactions for tool poisoning attacks, requiring an Anthropic API key.
Details
- Author
- RyosukeDTomita
- GitHub stars
- 3
- Downloads
- 304
- Categories
- Developer Tools, Security, Other
Jump to
- Includes both MCP Client and MCP Server implementations
- Supports tools like ipinfo for IP address lookup
- Integrates with Anthropic’s Claude API
- Can connect to multiple MCP servers via configuration
- Runs in Dev Containers or Docker environments
- Uses node.js v22 and the MCP TypeScript SDK
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
MCP_TOOL_POISONING_ATTACKSCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Set up the environment using Dev Containers or Docker, create a .env file with your ANTHROPIC_API_KEY, and configure mcp_client/mcpservers.json with the desired MCP servers. Run the client with node dist/index.js (Dev Containers) or docker compose run -it mcp_client (Docker), then enter prompts to use available tools.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"mcp_tool_poisoning_attacks": {
"mcp_tool_poisoning_attacks": {
"command": "docker",
"args": [
"compose",
"build"
]
}
}
}
}McpServers
{
"mcp_tool_poisoning_attacks": {
"command": "docker",
"args": [
"compose",
"build"
]
}
}A Node.js project demonstrating MCP client and server interactions for tool poisoning attacks, requiring an Anthropic API key.
- ABOUT
- ENVIRONMENT
- PREPARING
- HOW TO USE
- EXAMPLE
- node.js v22
- mcp sdk
- claude-3-5-haiku-20241022
[!NOTE]./servers/ipinfo/は現在npxを使ってMCP Clientから使用する形を取っている。 npxを使ってGitHubのリポジトリからinstallするにはpackage.jsonをリポジトリトップに配置する必要があるため，npx使用のための./package.jsonをリポジトリトップに配置している。
- install VSCode, Docker
- install VSCode ExtensionsDev ContainerS
- On the VSCode,Ctrl shift pand runDev Containers: Rebuild Containers
- create.envand addANTHROPIC_API_KEY
cat << EOF > mcp_client/.env ANTHROPIC_API_KEY=your_anthropic_api_key EOF
cat << EOF > mcp_client/.env ANTHROPIC_API_KEY=your_anthropic_api_key EOF
- createmcp_client/mcpservers.json
- build docker image
cd mcp_client yarn run bundle node dist/index.js
{ "mcpServers": { "ipinfo": { "command": "/usr/local/bin/npx", "args": [ "-y", "github:RyosukeDTomita/mcp_tool_poisoning_attacks#main", "ipinfo" ], "env": { "PATH": "/usr/local/bin:/usr/bin:/bin" } }, "burp": { "url": "http://localhost:9876/sse" } } }
[!NOTE] 現状はmcpservers.jsonの中にある一番上のサーバを使用するようになっている。
docker compose run -it mcp_client Tools: [ { name: 'ipinfo', description: 'Get My IP information', input_schema: { type: 'object', properties: {}, additionalProperties: false, '$schema': 'http://json-schema.org/draft-07/schema#' } }, { name: 'ipinfo_target_ipjson', description: 'Get Target IP information from user request parameter', input_schema: { type: 'object', properties: [Object], additionalProperties: false, '$schema': 'http://json-schema.org/draft-07/schema#' } } ] Enter your message: 8.8.8.8の情報を教えて =====Request to Anthoropic API===== [ { role: 'user', content: '8.8.8.8の情報を教えて' } ] =====Response from Anthropic API=====: { id: 'msg_012ZGLAfhWKmgDroHELiq6F6', type: 'message', role: 'assistant', model: 'claude-3-5-haiku-20241022', content: [ { type: 'text', text: '8.8.8.8の情報を調べるために、ipinfo_target_ipjsonツールを使用します。' }, { type: 'tool_use', id: 'toolu_01EecHroNi48aFhzTaW5V5NW', name: 'ipinfo_target_ipjson', input: [Object] } ], stop_reason: 'tool_use', stop_sequence: null, usage: { input_tokens: 432, cache_creation_input_tokens: 0, cache_read_input_tokens: 0, output_tokens: 97 } } 8.8.8.8の情報を調べるために、ipinfo_target_ipjsonツールを使用します。 =====MCP Server Tool result===== : { content: [ { type: 'text', text: '{"ip":"8.8.8.8","hostname":"dns.google","city":"Mountain View","region":"California","country":"US","loc":"38.0088,-122.1175","org":"AS15169 Google LLC","postal":"94043","timezone":"America/Los_Angeles","readme":"https://ipinfo.io/missingauth","anycast":true}' } ] } =====Response from Anthropic API after tool use===== この情報は、IPアドレス8.8.8.8の詳細を示しています。主な特徴は以下の通りです： 1. IP: 8.8.8.8 2. ホスト名: dns.google 3. 所在地: - 都市: Mountain View - 地域: カリフォルニア - 国: アメリカ合衆国（US） 4. 地理的座標: 北緯38.0088、西経-122.1175 5. 組織: AS15169 Google LLC 6. 郵便番号: 94043 7. タイムゾーン: アメリカ/ロサンゼルス 8. エニーキャスト: はい（true） この8.8.8.8は、Googleが提供する公開DNSサーバーの1つで、一般的に多くのユーザーが利用している信頼性の高いDNSサービスです。
- My MCPClient Readme
- My MCPServer(ipinfo) Readme
This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.
Security scanner for MCP servers and AI agent tooling. Detects prompt injection, command injection, auth bypass, and excessive permissions.
Build and test FaceSign step-up verification flows from your AI coding tool.
A demonstration tool showcasing potential security attack vectors against the Model Control Protocol (MCP).
An advanced penetration testing tool for automated, LLM-driven security assessments using tools like nmap and dirb.
Cyber Host Artificial Intelligence (C.H.A.I) is Autonomous penetration testing MCP (Model Context Protocol) server with an integrated AI decision engine, multi-provider LLM support, and an extensible plugin architecture.
Bring agent evaluations, observability, and synthetic test set generation directly into your IDE for free with Galileo's new MCP server
Browser automation via MCP for Chrome and Firefox
Bring the full power of BrowserStack’s Test Platform to your AI tools, making testing faster and easier for every developer and tester on your team.
Official Chrome DevTools MCP server for controlling and inspecting a live Chrome browser from coding agents such as Gemini, Claude, Cursor, and Copilot.
Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
