@kryptsec/mcp-server

MCP server for KryptSec CTF Arena — connect any AI coding assistant to the arena and learn cybersecurity with an AI sidekick.

What is this?

An MCP (Model Context Protocol) server that gives your AI assistant direct access to the KryptSec CTF Arena. Browse challenges, deploy lab environments, submit flags, track progress — all from your terminal. The server operates in sidekick mode: every tool response includes coaching guidance that steers the AI to teach methodology and reasoning, turning every challenge into a hands-on learning experience.

Works with any MCP-compatible client: Claude Code, Cursor, VS Code (Copilot), Windsurf, or anything else that speaks MCP over stdio.

Quick start

npm install -g @kryptsec/mcp-server
kryptsec-mcp auth
kryptsec-mcp setup

That's it. setup auto-detects which MCP clients you have installed and configures them. Restart your editor and start hacking.

Manual setup

If setup doesn't detect your client, or you want to configure a specific one:

# Target a specific client
kryptsec-mcp setup --client claude-code
kryptsec-mcp setup --client cursor
kryptsec-mcp setup --client windsurf
kryptsec-mcp setup --client vscode
kryptsec-mcp setup --client vscode-insiders

# List all supported clients
kryptsec-mcp clients

Generic / local LLMs

Any MCP client that supports stdio transport can use this server. Point it at the kryptsec-mcp binary:

{
  "kryptsec": {
    "command": "kryptsec-mcp",
    "transport": "stdio"
  }
}

Or run it directly:

kryptsec-mcp

The server reads/writes JSON-RPC over stdin/stdout per the MCP spec. Logs go to stderr.

CLI reference

kryptsec-mcp           Start the MCP server (stdio)
kryptsec-mcp auth      Authenticate with the CTF Arena
kryptsec-mcp setup     Auto-configure your MCP client(s)
kryptsec-mcp clients   List supported MCP clients
kryptsec-mcp status    Show current auth status

Tools

| Tool | Description | |------|-------------| | list_challenges | Browse available challenges, filter by category or difficulty | | get_challenge | Get a detailed mission briefing for a specific challenge | | deploy_lab | Spin up a lab environment (auto-joins teammate's lab if one exists) | | lab_status | Check deployment status, get access URL and session token | | list_labs | List your active lab deployments | | terminate_lab | Shut down a lab (or leave a shared team lab) | | extend_lab | Add 30 minutes to a running lab (max 3 extensions) | | team_labs | List active shared labs from your team | | team_lab_members | See who's connected to a shared lab | | submit_flag | Submit a flag for a challenge | | submit_answers | Submit answers for question-based challenges | | my_progress | View your stats, solves, and skill gaps | | faction_standings | Check the faction war leaderboard | | vpn_config | Get WireGuard config for VPN-based labs |

Guided workflows (Prompts)

The server exposes MCP prompts for structured learning:

• start_challenge — Mission briefing + methodology walkthrough before diving in
• analyze_lab — Structured reconnaissance guidance for a running lab
• review_progress — Progress review with personalized recommendations

Environment variables

| Variable | Description | |----------|-------------| | KRYPTSEC_TOKEN | Auth token (alternative to device auth flow) | | KRYPTSEC_API_URL | API base URL (default: https://api.kryptsec.com) |

License

MIT