How do I install MCPGoat?

Its README did not state an install command plainly enough for us to quote one, so we do not guess. The repository has the instructions: https://github.com/SabyasachiDhal/MCPGoat

Is MCPGoat official and is it maintained?

We found nothing naming it as a vendor’s official server. Its repository has 11 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-08-17.

What licence does MCPGoat use?

The repository declares the MIT licence.

InfratoApp / Resources / MCP servers / MCPGoat

MCPGoat

MCPGoat is an MCP server, listed under security. Its repository has 11 GitHub stars and is licensed under MIT; we last read it on 2026-10-24.

Provides a deliberately vulnerable MCP server for security training, featuring 26 challenges across four difficulty levels, a victim-agent harness, and a one-command Docker deployment. Users can practice penetration testing against the Model Context Protocol.

Install

MCP servers are packaged differently from each other -- some run via npx, some as a Docker image, some as a plain script you clone and run. MCPGoat’s own README did not state one plainly enough for this page to quote it rather than guess, so it will not guess. The repository below states it.

Read MCPGoat’s own install instructions ↗

What it reaches, and what it needs

Reaches

○ not recognised

Credential

○ none found

Maintenance

Stars

State

listed

Licence

MIT

From the repository

Deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-command Docker deploy. Practice penetration testing against the Model Context Protocol.

View on GitHub ↗2026-10-24

MCPGoat compared with similar servers

MCPGoat compared with the closest alternatives, by services reached, credentials, stars, last update and licence
Server	Reaches	Needs	Stars	Last update	Licence
MCPGoat (this page)	—	None listed	11	2026-08-17	MIT
ida-pro-mcp	—	None listed	13,080	2026-09-26	MIT
mcp-shodan	shodan	SHODAN_API_KEY	178	2026-10-19	MIT
mcp-server-idapro	—	None listed	103	2025-03-26	MIT
search-solodit-mcp	—	None listed	42	2025-06-30	—
opencti-mcp	opencti	OPENCTI_TOKEN	40	2026-08-03	MIT

Ranked by services in common with MCPGoat, then by stars. Figures are from each repository when we last read it.

Common questions about MCPGoat

What does MCPGoat do?: Provides a deliberately vulnerable MCP server for security training, featuring 26 challenges across four difficulty levels, a victim-agent harness, and a one-command Docker deployment. Users can practice penetration testing against the Model Context Protocol.
How do I install MCPGoat?: Its README did not state an install command plainly enough for us to quote one, so we do not guess. The repository has the instructions: https://github.com/SabyasachiDhal/MCPGoat
Is MCPGoat official and is it maintained?: We found nothing naming it as a vendor’s official server. Its repository has 11 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-08-17.
What licence does MCPGoat use?: The repository declares the MIT licence.

More MCP servers for security

ida-pro-mcp13,080 stars
mcp-shodan178 stars
mcp-server-idapro103 stars
search-solodit-mcp42 stars
opencti-mcp40 stars
MalwareBazaar_MCP30 stars

All security entries →