MCPTox

Benchmarks tool poisoning attacks on Minecraft Companion Protocol servers to identify vulnerabilities.

Updated Feb 11, 2026
One-click install
npx skills add https://github.com/zzw4257/security-skills --skill mcptox
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: MCPTox
Source: https://github.com/zzw4257/security-skills/tree/main/skills/mcptox
Command: npx skills add https://github.com/zzw4257/security-skills --skill mcptox

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of evaluating the security of MCP (Minecraft Companion Protocol) servers against tool poisoning attacks, providing a benchmark for assessing vulnerabilities.

Core Features & Use Cases

  • Vulnerability Assessment: Identifies potential weaknesses in MCP server implementations.
  • Security Benchmarking: Provides a standardized method to test and compare the security posture of different MCP servers.
  • Use Case: A security researcher can use this Skill to test a newly developed MCP server for susceptibility to known poisoning techniques before its public release.

Quick Start

Run the MCPTox benchmark against the target MCP server.

Frequently Asked Questions about MCPTox

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is an MCP server tool poisoning attack?

An MCP server tool poisoning attack exploits vulnerabilities in Minecraft Companion Protocol implementations by injecting malicious inputs. This Skill benchmarks these attacks to identify security weaknesses and assess server susceptibility to known poisoning techniques.

How do I benchmark security vulnerabilities in an MCP server?

You benchmark MCP server security vulnerabilities by running the MCPTox benchmark against the target server. This process tests the implementation to identify potential weaknesses and compare its security posture against known tool poisoning techniques.

What are the requirements for testing Minecraft Companion Protocol implementations?

Testing Minecraft Companion Protocol implementations requires Python 3.10 or higher and specific libraries for execution. These dependencies are necessary to run the vulnerability assessment and security benchmarking scripts against the target server.

Can I use this for security auditing before a Minecraft server release?

Yes, you can use this for security auditing before a Minecraft server release. Security researchers can test newly developed MCP servers for susceptibility to known poisoning techniques to ensure vulnerabilities are patched prior to public deployment.

What distinguishes a standardized MCP security benchmark from general penetration testing?

A standardized MCP security benchmark provides a specialized method to test and compare tool poisoning vulnerabilities specific to Minecraft Companion Protocol servers. Unlike general penetration testing, it focuses on known poisoning techniques to provide consistent vulnerability assessments.