CTFd MCP Server

by tomek7667

Not rated
GitHub

About

Connect to CTFd instance, download tasks and submit flags

Details

Author
tomek7667
Categories
Other, Security, Project Management

Setup

Install CTFd MCP Server in your MCP client (Claude Desktop, Cursor, Windsurf, and others).

Repository: https://github.com/tomek7667/ctfd-mcp-server

Follow the installation instructions in the repository README, then restart your MCP client.

A lightweight and extensible Model Context Protocol (MCP) server for interacting with any CTFd instance. This project enables AI tools and automation to authenticate, retrieve challenges, and submit flags through MCP tools.

This project acts as a bridge between CTFd and AI-driven systems by providing a unified interface. It supports multiple authentication modes, dynamic base URL control, and direct MCP tool integration.

The server is validated using the official demo instance athttps://demo.ctfd.io.

pnpm install -g ctfd-mcp-server ctfd-mcp-server
git clone https://github.com/tomek7667/ctfd-mcp-server.git cd ctfd-mcp-server pnpm install pnpm run build pnpm start

Claude Desktop supports MCP servers via a JSON configuration file.

- macOS:~/Library/Application Support/Claude/claude_desktop_config.json
- Windows:%APPDATA%\Claude\claude_desktop_config.json

{ "mcpServers": { "ctfd": { "command": "npx", "args": ["-y", "ctfd-mcp-server"], "env": { "BASE_URL": "https://demo.ctfd.io", "CTFD_TOKEN": "<your ctfd api token>" } } } }
{ "mcpServers": { "ctfd": { "command": "ctfd-mcp-server", "env": { "BASE_URL": "https://demo.ctfd.io", "CTFD_TOKEN": "<your ctfd api token>" } } } }

Restart Claude Desktop after editing the config.

Codex CLI stores MCP configuration in~/.codex/config.toml.

codex mcp add ctfd -- npx -y ctfd-mcp-server
[mcp_servers.ctfd] command = "npx" args = ["-y", "ctfd-mcp-server"] [mcp_servers.ctfd.env] BASE_URL = "https://demo.ctfd.io" CTFD_TOKEN = "<your ctfd api token>"

Use/mcpin the Codex TUI to verify the server is connected.

Amp supports MCP servers via theamp.mcpServerssetting in VS Codesettings.json.

- macOS:~/Library/Application Support/Code/User/settings.json
- Windows:%APPDATA%\Code\User\settings.json
- Linux:~/.config/Code/User/settings.json

{ "amp.mcpServers": { "ctfd": { "command": "npx", "args": ["-y", "ctfd-mcp-server"], "env": { "BASE_URL": "https://demo.ctfd.io", "CTFD_TOKEN": "<your ctfd api token>" } } } }

Gemini CLI stores MCP configuration in~/.gemini/settings.json.

{ "mcpServers": { "ctfd": { "command": "npx", "args": ["-y", "ctfd-mcp-server"], "env": { "BASE_URL": "https://demo.ctfd.io", "CTFD_TOKEN": "<your ctfd api token>" } } } }
gemini mcp add ctfd npx -- -y ctfd-mcp-server

Use/mcpin Gemini CLI to verify server status.

docker build -t ctfd-mcp-server . docker run -i ctfd-mcp-server

For clients that support Docker-based MCP servers:

{ "mcpServers": { "ctfd": { "command": "docker", "args": ["run", "-i", "--rm", "ctfd-mcp-server"] } } }
# Clone and install git clone https://github.com/tomek7667/ctfd-mcp-server.git cd ctfd-mcp-server pnpm install # Build pnpm run build # Run pnpm start # Watch mode (auto-rebuild) pnpm run watch

For support, emailjamescotid@gmail.comor open an issue through the GitHub repository. Community contributions and improvements are always welcome.

AI learning assistant that manages game time rewards based on school grades, homework, and bonus tasks

A deliberately vulnerable MCP server for hands-on penetration-testing practice — 26 challenges, 78 capture-the-flag flags, plus a victim-agent harness that shows a real LLM agent being exploited.

ThreatByte-MCP is a deliberately vulnerable, MCP-based case management web app. It mirrors a realistic SOC analyst workflow with a server-rendered UI and a real MCP server. The MCP tools are intentionally vulnerable for training and demonstration.

Programmatically interact with Canvas/Instructure courses and assignments.

This is the Oficial Model Context Protocol (MCP) server for the CyberEdu CTF platform (cyber-edu.co / cyberedu.ro)

An MCP (Model Context Protocol) server that brings the capabilities of the enigmapython library to LLMs, allowing them to encrypt and decrypt messages using historically accurate Enigma machine emulators

ALTER - identity infrastructure for the AI economy

The only certificate-transparency MCP server. Search 2.15B+ TLS certificates, monitor domains for new issuance, stream the global CT firehose to your agent.

Interact with EduBase, a comprehensive e-learning platform with advanced quizzing, exam management, and content organization capabilities

KHEPRA MCP Server smithery badge MCP Registry License Container PQC Sovereign compliance engine with 36,195 STIG/CCI/NIST/CMMC mappings. Air-gappable. Zero token costs. Run ert_scan → get a Godfather Report with dollar-denominated business impact. The only MCP compliance server that runs on your metal — with the World's First DoD PQC STIG built in. PQC-01-STIG-V1R1 — Full Whitepaper → 17 controls covering CNSA 2.0, FIPS 203/204/205, and the NSA's May 2026 MCP security advisory. The world's first DoD-style Post-Quantum Cryptography STIG, including the first PQC controls for agentic AI and MCP deployments.

No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.