Skip to content
InfratoApp
InfratoApp / Resources / MCP servers / ThreatByte-MCP

ThreatByte-MCP

ThreatByte-MCP is an MCP server, listed under model apis. It reaches openai and tbmcp. It needs OPENAI_API_KEY and TBMCP_MCP_SERVER_TOKEN to authenticate. Its repository has 3 GitHub stars and is licensed under MIT; we last read it on 2026-10-23.

ThreatByte-MCP is a deliberately vulnerable, MCP-inspired case management web app.

Install

MCP servers are packaged differently from each other -- some run via npx, some as a Docker image, some as a plain script you clone and run. ThreatByte-MCP’s own README did not state one plainly enough for this page to quote it rather than guess, so it will not guess. The repository below states it.

What it reaches, and what it needs

Reaches
openai, tbmcp
Credential
OPENAI_API_KEY, TBMCP_MCP_SERVER_TOKEN

Maintenance

Stars
3
State
listed
Licence
MIT
From the repository

ThreatByte-MCP is a deliberately vulnerable, MCP-inspired case management web app.

ThreatByte-MCP compared with similar servers

ThreatByte-MCP compared with the closest alternatives, by services reached, credentials, stars, last update and licence
ServerReachesNeedsStarsLast updateLicence
ThreatByte-MCP (this page)openai, tbmcpOPENAI_API_KEY, TBMCP_MCP_SERVER_TOKEN32026-05-12MIT
paperbananaatlascloud, google, openai(1 shared)ATLASCLOUD_API_KEY, GOOGLE_API_KEY, OPENAI_API_KEY2,4122026-09-17MIT
ms-365-mcp-serverms365, openai(1 shared)MS365_MCP_ATTACHMENT_URL_KEY, MS365_MCP_CLIENT_SECRET, MS365_MCP_OAUTH_TOKEN, OPENAI_API_KEY1,0682026-10-23MIT
just-promptanthropic, deepseek, gemini, groq, openai(1 shared)ANTHROPIC_API_KEY, DEEPSEEK_API_KEY, GEMINI_API_KEY, GROQ_API_KEY, OPENAI_API_KEY7392025-08-10—
flamaanthropic, openai(1 shared)None listed3042026-10-13Apache-2.0
mcp-ragdocsopenai, qdrant(1 shared)OPENAI_API_KEY, QDRANT_API_KEY2652025-07-18MIT

Ranked by services in common with ThreatByte-MCP, then by stars. Figures are from each repository when we last read it.

Common questions about ThreatByte-MCP

What does ThreatByte-MCP do?
ThreatByte-MCP is a deliberately vulnerable, MCP-inspired case management web app.
How do I install ThreatByte-MCP?
Its README did not state an install command plainly enough for us to quote one, so we do not guess. The repository has the instructions: https://github.com/anotherik/ThreatByte-MCP
What does ThreatByte-MCP connect to, and what does it need?
It reaches openai and tbmcp. The credentials we found in its source are OPENAI_API_KEY and TBMCP_MCP_SERVER_TOKEN.
Is ThreatByte-MCP official and is it maintained?
We found nothing naming it as a vendor’s official server. Its repository has 3 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-05-12.
What licence does ThreatByte-MCP use?
The repository declares the MIT licence.

More MCP servers for model apis

All model apis entries →

Learn this on Infrato