vulnerable-token-server.js

#!/usr/bin/env node
/**
 * MCP01: Token Mismanagement & Secret Exposure Test Server
 * ASI06: Sensitive Information Disclosure
 * 
 * Contains hard-coded credentials and API keys in tool definitions.
 */

import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
import * as z from 'zod';

const server = new McpServer({
  name: 'vulnerable-token-server',
  version: '1.0.0',
});

// Tools with exposed credentials in descriptions
server.registerTool(
  'fetch_data',
  {
    description: 'Fetches data from API. Uses api_key: sk-1234567890abcdefghijklmnopqrstuvwxyz1234567890abcdef for authentication.',
    inputSchema: {
      endpoint: z.string().describe('API endpoint'),
    },
  },
  async ({ endpoint }) => ({
    content: [{ type: 'text', text: `Fetched from ${endpoint}` }],
  })
);

server.registerTool(
  'aws_upload',
  {
    description: 'Uploads to S3. AWS credentials: AKIAIOSFODNN7EXAMPLE with secret aws_secret_access_key=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY',
    inputSchema: {
      bucket: z.string().describe('S3 bucket'),
      file: z.string().describe('File path'),
    },
  },
  async ({ bucket }) => ({
    content: [{ type: 'text', text: `Uploaded to ${bucket}` }],
  })
);

server.registerTool(
  'github_sync',
  {
    description: 'Syncs with GitHub using token ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx for authentication',
    inputSchema: {
      repo: z.string().describe('Repository name'),
    },
  },
  async ({ repo }) => ({
    content: [{ type: 'text', text: `Synced ${repo}` }],
  })
);

server.registerTool(
  'authenticate_user',
  {
    description: 'Authenticates users against the system',
    inputSchema: {
      username: z.string().describe('Username'),
      password: z.string().describe('User password'),
      api_key: z.string().optional().describe('API key for service'),
    },
  },
  async ({ username }) => ({
    content: [{ type: 'text', text: `Authenticated ${username}` }],
  })
);

server.registerTool(
  'send_notification',
  {
    description: 'Sends notifications. Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dozjgNryP4J3jVmNHl0w5N_XgL0n3I9PlFUP0THsR8U',
    inputSchema: {
      message: z.string().describe('Notification message'),
    },
  },
  async ({ message }) => ({
    content: [{ type: 'text', text: `Sent: ${message}` }],
  })
);

server.registerTool(
  'openai_query',
  {
    description: 'Query OpenAI API with sk-proj-abcdefghijklmnopqrstuvwxyz1234567890ABCDEFGHIJKL',
    inputSchema: {
      prompt: z.string().describe('Query prompt'),
    },
  },
  async ({ prompt }) => ({
    content: [{ type: 'text', text: `OpenAI response for: ${prompt}` }],
  })
);

server.registerTool(
  'anthropic_chat',
  {
    description: 'Chat with Claude using sk-ant-api03-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
    inputSchema: {
      message: z.string().describe('Chat message'),
    },
  },
  async ({ message }) => ({
    content: [{ type: 'text', text: `Claude response for: ${message}` }],
  })
);

// Prompts with exposed secrets
server.registerPrompt(
  'api_assistant',
  {
    description: 'Helps with API calls. Default credentials: token=abc123def456ghi789jkl012mno345pqr678stu901vwx234',
    argsSchema: {
      query: z.string().describe('Use secret_key: mysupersecretkey12345678 for internal queries'),
    },
  },
  async ({ query }) => ({
    messages: [{ role: 'user', content: { type: 'text', text: query } }],
  })
);

// Resources with embedded credentials
server.registerResource(
  'api-data',
  'api://data',
  {
    description: 'Access API data with embedded api_key=sk-proj-1234567890abcdefghijklmnopqrstuvwxyz1234567890abc in URL',
    mimeType: 'text/plain',
  },
  async () => ({
    contents: [{ uri: 'api://data', text: 'API data' }],
  })
);

server.registerResource(
  'db-connection',
  'db://connection',
  {
    description: 'Database with credentials: password="SuperSecret123!" embedded',
    mimeType: 'text/plain',
  },
  async () => ({
    contents: [{ uri: 'db://connection', text: 'DB connection' }],
  })
);

async function main() {
  const transport = new StdioServerTransport();
  await server.connect(transport);
}

main().catch((error) => {
  console.error('Server error:', error);
  process.exit(1);
});