Back to Apps

Otto Support
by bishopfox
Vulnerable MCP server for security research, featuring tiered authentication and 19 administrative tools.
0 stars
Works in:CursorCodex
Exposes:Tools
What it does
Otto Support is a specialized MCP server designed as a vulnerable customer support system. It allows AI assistants to interact with a simulated support environment, providing a platform for testing security boundaries and authentication escalation within the MCP protocol.
Tools
status: System health check and service endpoint discovery.create_user: Create a new user account and retrieve an auth token.authenticate: Escalate user roles using a session token.create_ticket: Generate support tickets for the current account.search_customers: Search all customers by name, email, or status (Support tier).web_fetch: Access internal API endpoints and external URLs (Support tier).debug: Dump runtime configurations, including signing keys and environment variables (Support tier).active_sessions: List all active system sessions (Support tier).db_lookup: Execute direct database queries (Support tier).troubleshoot: Run high-level system diagnostic commands (Admin tier).
Installation
{
"mcpServers": {
"otto-support": {
"command": "otto-support"
}
}
}
Supported hosts
- Claude Desktop
- Cursor
- Codex
Quick install
go build -o otto-support ./cmd/otto-support/ && ./otto-support setup claudeInformation
- Pricing
- free
- Published
- 7/16/2026
- stars
- 0
Categories
Choose your AI client and follow the steps below.
Codex
Use 'otto-support setup codex' to configure ~/.codex/mcp.jsonCursor
Use 'otto-support setup cursor' to configure .cursor/mcp.jsonClaude Desktop
{
"mcpServers": {
"otto-support": {
"command": "otto-support"
}
}
}





