Mmcp.market

CTFd MCP server

by MrJamescot·io.github.MrJamescot/ctfd-mcp-server·v1.0.3
No reviews yet

MCP server for CTFd v3: list challenges, submit flags, and query scoreboards via AI agents.

B83/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

6 stars

Reviews

Write one

Nobody has reviewed CTFd yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

CTFd tools (13, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • auth_status

    Report whether the current session is authenticated and which auth mode is active.

  • challenge

    Get the full detail of a single challenge by numeric id or name.

  • challenges

    List challenges with optional filters and pagination.

  • download_file

    Download a challenge file into the local cache directory.

  • health

    Perform a health check: CTFd reachability, API status and authentication state.

  • instance_info

    Return safe, public metadata about the configured CTFd instance.

  • login

    Log in to CTFd with a username and password (kept in memory only).

  • progress

    Return the authenticated user's progress (score and solved challenges).

  • scoreboard

    Return the public CTFd scoreboard (top standings).

  • set_base_url

    Configure the CTFd instance this server talks to.

  • set_cookie

    Use a session cookie for authentication (memory only, never logged).

  • set_token

    Use an API token for authentication (stored in memory only, never logged).

  • submit_flagwrite action

    Submit a flag for a challenge.

Public scan report

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings
  • Code scan15 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

claude mcp add ctfd-mcp-server -- uvx ctfd-mcp-server
Add to Cursor

CTFd: common questions

Is CTFd MCP server safe?
Mostly: it is graded B (83/100). Read the CTFd safety report
How do I install CTFd?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does CTFd need an API key?
Yes. The registry entry asks for CTFD_ADMIN_TOKEN, CTFD_SESSION_COOKIE, CTFD_PASSWORD.
Is CTFd maintained?
The last commit was in the last day (2026-09-20). The latest release is v1.0.3.

More from MrJamescot →