实时黑箱安全评估 模拟上下文协议服务器。它驱动 授权目标在其真实传输上发送真实且畸形的输入， 对响应进行分类，并将发现和复制数据写入磁盘。

文献 | 评估工作流程 | CLI参考 | 发行作品

授权

仅对您拥有或明确授权的MCP服务器使用此工具 测试。它发送攻击模式输入，可以启动本地进程，并且 --auth-audit-intrusive 将对目标的 OAuth 客户端进行注册 授权服务器。内置安全控制减少了意外撞击; 它们不能替代容器、虚拟机或特定交战 网络边界。--security-audit-intrusive 发送一个外源探测器到 测试DNS重新绑定防御，并要求同样的显式授权。

它的作用

fuzzer 通过 stdio、HTTP、SSE 或可流式 HTTP 连接，并响应 固定的评估题目集：

• 服务器暴露哪些工具、资源、提示和协议方法？
• 它是否拒绝格式错误且违约的输入，还是接受？

MCP Server Fuzzer

Black-box security assessment for live Model Context Protocol servers. It drives an authorized target over its real transport, sends realistic and malformed input, classifies the responses, and writes findings and reproduction data to disk.

Documentation | Assessment workflow | CLI reference | Releases

Authorization

Use this tool only against MCP servers you own or are explicitly authorized to test. It sends attack-pattern input, can start local processes, and with --auth-audit-intrusive will register OAuth clients on the target’s authorization server. The built-in safety controls reduce accidental impact; they are not a substitute for a container, a VM, or an engagement-specific network boundary. --security-audit-intrusive sends a foreign-Origin probe to test DNS-rebinding defenses and requires the same explicit authorization.

What it does

The fuzzer connects over stdio, HTTP, SSE, or Streamable HTTP and answers a fixed set of assessment questions:

• What tools, resources, prompts, and protocol methods does the server expose?
• Does it reject malformed and out-of-contract input, or accept it?
• Do tool descriptions or schemas carry poisoning markers, hidden instructions,