mcpbait is an open-source project built for AI security researchers and developers testing MCP agents.

Yes — mcpbait is open source under the Apache-2.0 license and free to use.

What platforms does mcpbait run on?

mcpbait runs on the command line. It can also be self-hosted.

Is mcpbait still maintained?

Unverified. mcpbait has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.

What are alternatives to mcpbait?

Similar projects tracked by PulseGate include mcp-kitchen-sink, metasploit-mcp, and mcp-mcts.

Is mcpbait open source?

Yes — mcpbait is open source under the Apache-2.0 license.

Back to the index

mcpbait

PyPIInfrastructure

mcpbait is an Apache-licensed red-teaming framework for evaluating whether Model Context Protocol agents can be hijacked. It is distributed as a Python package for security researchers and developers testing agent and MCP deployments.

Open SourceApache-2.0CLISelf-hosted

Visit PyPI

Overview

5 features

mcpbait is a Penetration testing & red teaming project. It focuses on testing and demonstrating whether MCP agents are vulnerable to hijacking and prompt injection. mcpbait is an open-source project aimed at AI security researchers and developers testing MCP agents. The project is open source (Apache-2.0). It runs on the command line, and it can be self-hosted.

mcpbait first shipped in 2026. Among its 5 catalogued features are MCP Testing, Agent Hijacking Tests, and Prompt Injection Testing. It exposes integrations via an MCP server.

Summary written by a language model from the project’s public pages.

MCP Testing
Agent Hijacking Tests
Prompt Injection Testing
Red Teaming
Security Assessment

Built with & integrations

Connectors

MCP

Runs on

CLISelf-hosted

Trust & compliance

License

Apache-2.0

Verified signals

HTTPSOpen Source

Indexing history

What PulseGate has recorded for this listing

Indexed1 Sep · 01:20 UTC
mcpbait verified via PyPI Bulk Enumerator
Source: PyPI Bulk Enumerator · Open

Frequently asked questions about mcpbait

What is mcpbait?: Mcpbait focuses on testing and demonstrating whether MCP agents are vulnerable to hijacking and prompt injection. It is catalogued under Penetration testing & red teaming on PulseGate.
Who is mcpbait for?: mcpbait is an open-source project built for AI security researchers and developers testing MCP agents.
Is mcpbait free?: Yes — mcpbait is open source under the Apache-2.0 license and free to use.
What platforms does mcpbait run on?: mcpbait runs on the command line. It can also be self-hosted.
Is mcpbait still maintained?: Unverified. mcpbait has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.
What are alternatives to mcpbait?: Similar projects tracked by PulseGate include mcp-kitchen-sink, metasploit-mcp, and mcp-mcts.mcp-kitchen-sink metasploit-mcp mcp-mcts
How long has mcpbait been around?: mcpbait first shipped in 2026.
Is mcpbait open source?: Yes — mcpbait is open source under the Apache-2.0 license.

At a glance

Platforms: CLI
Languages: English
License: Apache-2.0
First seen: 1 Sep 2026
Built for: AI security researchers and developers testing MCP agents
Model: Open source
Solves: Testing and demonstrating whether MCP agents are vulnerable to hijacking and prompt injection.

Registered as

PyPI: mcpbait

Developer

Pypi

Index record

Indexed: 1 Sep 2026
Lifecycle: Alive
First seen: Sep 2026
Last seen: 1 Sep 2026

Identity audit (13)

Slug: mcpbait-pypi-org
Lifecycle last checked: 8 Sep 2026
Verification state: Indexed for public listing
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 1 Sep 2026
Timeline basis: Indexed-at chronology (no inferred launch/funding milestones).
Name from: Written by a language model from the project's public pages.
Category from: Recorded source: taxonomy-pass-b.
Summary from: Written by a language model from public pages.
Languages from: Detected by a language model from page content.
Last updated: 1 Sep 2026
Canonical URL: https://pypi.org/project/mcpbait

Ship this? Send a correction — no account, and you get a link to follow it.

Similar projects

Closest matches by what these projects do