MCP01 Token Mismanagement
Rank #119,130glama/Anita-ani/mcp-security-lab
A deliberately vulnerable MCP server demonstrating API key exposure through hardcoding, plaintext logging, and returning secrets to the model, part of the OWASP MCP Top 10 security lab.
MCP01 Token Mismanagement is a Model Context Protocol (MCP) server published by Anita-ani. It ranks #119,130 of 137,492 servers tracked on MCP Toplist. MCP01 Token Mismanagement is listed on Glama, and ships as a single rolling release with no explicit version metadata. It was first listed on Jul 21, 2026.
Ranks ahead of 18,362 of 137,492 servers on MCP Toplist.
Use MCP01 Token Mismanagement
No credentials or required configuration declared — add it to your MCP client and go.
This server doesn't publish a machine-readable install config — see the repository README for install instructions.
Show your rank
Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.
[](https://mcptoplist.com/server/glama%2FAnita-ani%2Fmcp-security-lab)<a href="https://mcptoplist.com/server/glama%2FAnita-ani%2Fmcp-security-lab"><img src="https://mcptoplist.com/badge/glama%2FAnita-ani%2Fmcp-security-lab.svg" alt="MCP Toplist: #119,130 of 137,492" /></a>Variants: append ?metric=score or ?metric=stars to the image URL.
Listed on 1 registry
Anita-ani
Not versioned
This server is published through a registry that does not expose explicit version metadata, and no GitHub release tags were found on the linked repository. The listing tracks a single rolling release.
Frequently asked questions
- Who maintains MCP01 Token Mismanagement?
- MCP01 Token Mismanagement is maintained by Anita-ani, which publishes 1 MCP server (0 total versions) tracked on MCP Toplist.
- Is MCP01 Token Mismanagement listed on the Official MCP Registry?
- MCP01 Token Mismanagement is not on the Official MCP Registry. It is listed on Glama.
- How many versions does MCP01 Token Mismanagement have?
- MCP01 Token Mismanagement ships as a single rolling release with no explicit version metadata.
- Where can I find the source code for MCP01 Token Mismanagement?
- The source code for MCP01 Token Mismanagement is hosted at github.com/Anita-ani/mcp-security-lab.
Do you run this server?
Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.