CTFd

io.github.MrJamescot/ctfd-mcp-server

MCP server for CTFd v3: list challenges, submit flags, and query scoreboards via AI agents.

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "ctfd-mcp-server": {
      "command": "uvx",
      "args": [
        "ctfd-mcp-server"
      ],
      "env": {
        "CTFD_BASE_URL": "<your CTFD_BASE_URL>",
        "CTFD_ADMIN_TOKEN": "<your CTFD_ADMIN_TOKEN>",
        "CTFD_SESSION_COOKIE": "<your CTFD_SESSION_COOKIE>",
        "CTFD_PASSWORD": "<your CTFD_PASSWORD>"
      }
    }
  }
}
Environment variables
  • CTFD_BASE_URLrequiredRoot URL of the CTFd v3 instance, e.g. https://ctf.example.com (without /api/v1)
  • CTFD_ADMIN_TOKENsecretCTFd API access token (preferred authentication method)
  • CTFD_SESSION_COOKIEsecretFull CTFd session cookie, e.g. session=abc...
  • CTFD_PASSWORDsecretPassword for CTFd form login

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
1.0.4
Registry
active
Published
9/21/2026
Browse all Developer Tools →

Add the badge to your site

Show visitors that CTFd is listed here — it’s also the link we check for a free listing.

CTFd — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-mrjamescot-ctfd-mcp-server?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="CTFd — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![CTFd — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-mrjamescot-ctfd-mcp-server?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.