bad-mcp/docker-compose.yml at main · canack/bad-mcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
networks:
  vuln-external:
    driver: bridge

services:
  # ── MCP Servers ────────────────────────────────────────────────────
  schema-poison-notes:
    build: ./servers/schema-poison-notes
    ports:
      - "127.0.0.1:8001:8080"
    networks:
      - vuln-external
    restart: unless-stopped

  response-inject-tickets:
    build: ./servers/response-inject-tickets
    ports:
      - "127.0.0.1:8002:8080"
    networks:
      - vuln-external
    restart: unless-stopped

  shadow-exfil:
    build: ./servers/shadow-exfil
    ports:
      - "127.0.0.1:8003:8080"
    networks:
      - vuln-external
    restart: unless-stopped

  squatting-file-ops:
    build: ./servers/squatting-file-ops
    ports:
      - "127.0.0.1:8004:8080"
    networks:
      - vuln-external
    restart: unless-stopped

  tool-poisoning-calc:
    build: ./servers/tool-poisoning-calc
    ports:
      - "127.0.0.1:8005:8080"
    networks:
      - vuln-external
    restart: unless-stopped

  true-rug-pull:
    build: ./servers/true-rug-pull
    ports:
      - "127.0.0.1:8006:8080"
    networks:
      - vuln-external
    restart: unless-stopped

  resource-poison-docs:
    build: ./servers/resource-poison-docs
    ports:
      - "127.0.0.1:8007:8080"
    networks:
      - vuln-external
    restart: unless-stopped

  indirect-inject-fetcher:
    build: ./servers/indirect-inject-fetcher
    ports:
      - "127.0.0.1:8008:8080"
    networks:
      - vuln-external
    restart: unless-stopped

  exfil-chain-analytics:
    build: ./servers/exfil-chain-analytics
    ports:
      - "127.0.0.1:8009:8080"
    networks:
      - vuln-external
    restart: unless-stopped

  denial-of-wallet:
    build: ./servers/denial-of-wallet
    ports:
      - "127.0.0.1:8010:8080"
    networks:
      - vuln-external
    restart: unless-stopped
    deploy:
      resources:
        limits:
          memory: 256M
          cpus: "0.5"

  # ── Test Runner (only runs with --profile test) ────────────────────
  smoke-test:
    build: ./tests/smoke
    profiles:
      - test
    networks:
      - vuln-external
    depends_on:
      - schema-poison-notes
      - response-inject-tickets
      - shadow-exfil
      - squatting-file-ops
      - tool-poisoning-calc
      - true-rug-pull
      - resource-poison-docs
      - indirect-inject-fetcher
      - exfil-chain-analytics
      - denial-of-wallet