CTFd MCP Server
Connect to CTFd instance, download tasks and submit flags
CTFd MCP Server
A lightweight and extensible Model Context Protocol (MCP) server for interacting with any CTFd instance. This project enables AI tools and automation to authenticate, retrieve challenges, and submit flags through MCP tools.
Overview
This project acts as a bridge between CTFd and AI-driven systems by providing a unified interface. It supports multiple authentication modes, dynamic base URL control, and direct MCP tool integration.
The server is validated using the official demo instance at https://demo.ctfd.io.
Features
- Dynamic BASE_URL configuration
- Token and cookie authentication
- Username/password login
- List challenges with optional filtering
- Submit flags programmatically
- Compatible with MCP-based AI tools (Claude, Codex, Amp, Gemini)
- Clean and extensible TypeScript codebase
Quickstart
Option 1: npx (no install)
npx ctfd-mcp-server
Option 2: Global install
pnpm install -g ctfd-mcp-server
ctfd-mcp-server
Option 3: From source
git clone https://github.com/tomek7667/ctfd-mcp-server.git
cd ctfd-mcp-server
pnpm install
pnpm run build
pnpm start
Tools
| Tool | Description |
|---|---|
set_base_url(url) | Set the base URL for the CTFd instance |
set_token(token) | Set authentication token |
set_cookie(cookie) | Set session cookie |
login(username, password) | Login with credentials |
challenges(category?) | List challenges, optionally filtered by category |
challenge(identifier) | Get challenge details by name or ID |
submit_flag(challenge_name?, challenge_id?, flag) | Submit a flag |
scoreboard() | Get the CTFd scoreboard |
progress() | Get current user's progress |
health() | Check connection health |
Client Setup
Claude Desktop
Claude Desktop supports MCP servers via a JSON configuration file.
Config file location:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json
Using npx (recommended):
{
"mcpServers": {
"ctfd": {
"command": "npx",
"args": ["-y", "ctfd-mcp-server"],
"env": {
"BASE_URL": "https://demo.ctfd.io",
"CTFD_TOKEN": "<your ctfd api token>"
}
}
}
}
Using global install:
{
"mcpServers": {
"ctfd": {
"command": "ctfd-mcp-server",
"env": {
"BASE_URL": "https://demo.ctfd.io",
"CTFD_TOKEN": "<your ctfd api token>"
}
}
}
}
Restart Claude Desktop after editing the config.
OpenAI Codex CLI
Codex CLI stores MCP configuration in ~/.codex/config.toml.
Using the CLI:
codex mcp add ctfd -- npx -y ctfd-mcp-server
Or edit ~/.codex/config.toml directly:
[mcp_servers.ctfd]
command = "npx"
args = ["-y", "ctfd-mcp-server"]
[mcp_servers.ctfd.env]
BASE_URL = "https://demo.ctfd.io"
CTFD_TOKEN = "<your ctfd api token>"
Use /mcp in the Codex TUI to verify the server is connected.
Amp
Amp supports MCP servers via the amp.mcpServers setting in VS Code settings.json.
Config file location (VS Code):
- macOS:
~/Library/Application Support/Code/User/settings.json - Windows:
%APPDATA%\Code\User\settings.json - Linux:
~/.config/Code/User/settings.json
Using npx (recommended):
{
"amp.mcpServers": {
"ctfd": {
"command": "npx",
"args": ["-y", "ctfd-mcp-server"],
"env": {
"BASE_URL": "https://demo.ctfd.io",
"CTFD_TOKEN": "<your ctfd api token>"
}
}
}
}
Via CLI:
amp mcp add ctfd npx -y ctfd-mcp-server
Gemini CLI
Gemini CLI stores MCP configuration in ~/.gemini/settings.json.
Using npx (recommended):
{
"mcpServers": {
"ctfd": {
"command": "npx",
"args": ["-y", "ctfd-mcp-server"],
"env": {
"BASE_URL": "https://demo.ctfd.io",
"CTFD_TOKEN": "<your ctfd api token>"
}
}
}
}
Via CLI:
gemini mcp add ctfd npx -- -y ctfd-mcp-server
Use /mcp in Gemini CLI to verify server status.
Docker
docker build -t ctfd-mcp-server .
docker run -i ctfd-mcp-server
For clients that support Docker-based MCP servers:
{
"mcpServers": {
"ctfd": {
"command": "docker",
"args": ["run", "-i", "--rm", "ctfd-mcp-server"]
}
}
}
Compatibility
| Feature | Supported |
|---|---|
| Transport | stdio |
| Node.js | >=18.0.0 |
| Platforms | macOS, Linux, Windows |
Tested Clients
| Client | Status |
|---|---|
| Claude Desktop | ✅ Verified |
| OpenAI Codex CLI | ✅ Verified |
| Amp | ✅ Verified |
| Gemini CLI | ✅ Verified |
Environment Variables
| Variable | Description | Default |
|---|---|---|
BASE_URL | CTFd instance base URL | https://demo.ctfd.io |
Development
# Clone and install
git clone https://github.com/tomek7667/ctfd-mcp-server.git
cd ctfd-mcp-server
pnpm install
# Build
pnpm run build
# Run
pnpm start
# Watch mode (auto-rebuild)
pnpm run watch
Support
For support, email [email protected] or open an issue through the GitHub repository. Community contributions and improvements are always welcome.
License
Verwandte Server
Tickory MCP Server
Scheduled scans across all Binance spot and perpetual pairs using CEL rules (RSI, volume, MAs, price action). Runs server-side 24/7, fires webhooks on match, with delivery proof and alert explainability.
MCP Kali Server
A comprehensive Model Context Protocol (MCP) server for penetration testing and cybersecurity operations, providing seamless integration between Kali Linux tools and MCP-compatible clients.
Toreva
Non-custodial DeFi execution primitives for Solana. Best-execution routing for perpetual futures across Jupiter Perps, Pacifica, Drift, and Flash Trade. 1 bps fee to open. Everything else is free. 20 MCP tools for perps, yield, scanning, simulation, and execution.
Strider Labs Instacart MCP
MCP server for Instacart - let AI agents order groceries and household items from local stores
Alpaca Trading
Manage stock and crypto portfolios, place trades, and access market data via the Alpaca Trading API.
FatSecret
Server that connects Claude/Cursor to the FatSecret Platform API. Search foods, track your diet, manage recipes, and monitor weight directly from your AI assistant.
US Safety Recalls MCP
Search NHTSA vehicle recalls and FDA food/drug recalls in real-time. 4 MCP tools for product safet monitoring.
Corpo MCP Server
Form and govern Wyoming DAO LLCs for AI agents — 16 tools for entity formation, governance, compliance, and director marketplace via MCP.
MISP MCP Server
Integrates with MISP (Malware Information Sharing Platform) to provide threat intelligence capabilities to Large Language Models.
Github MCP Server Java
A production-ready MCP server that connects any MCP-compatible AI agent to the GitHub API. Manage repositories, issues, pull requests, and search — all through natural language.