CTFd runs on your own machine — the client starts it, so there is no endpoint to ping. 349 installs a week from pypi. Last commit 21 Sep 2026.
MCP server for CTFd v3: list challenges, submit flags, and query scoreboards via AI agents.
What the code does
We read the source, 1 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
path = os.path.join(ddir, fname)
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add ctfd-mcp-server -e 'CTFD_BASE_URL=<CTFD_BASE_URL>' -- uvx ctfd-mcp-server{
"mcpServers": {
"ctfd-mcp-server": {
"command": "uvx",
"args": [
"ctfd-mcp-server"
],
"env": {
"CTFD_BASE_URL": "<CTFD_BASE_URL>"
}
}
}
}[mcp_servers.ctfd-mcp-server]
command = "uvx"
args = ["ctfd-mcp-server"]
env = { CTFD_BASE_URL = "<CTFD_BASE_URL>" }{
"mcpServers": {
"ctfd-mcp-server": {
"command": "uvx",
"args": [
"ctfd-mcp-server"
],
"env": {
"CTFD_BASE_URL": "<CTFD_BASE_URL>"
}
}
}
}{
"servers": {
"ctfd-mcp-server": {
"type": "stdio",
"command": "uvx",
"args": [
"ctfd-mcp-server"
],
"env": {
"CTFD_BASE_URL": "<CTFD_BASE_URL>"
}
}
}
}Put your own value in place of
<CTFD_BASE_URL> (Root URL of the CTFd v3 instance, e.g. https://ctf.example.com (without /api/v1)).
The author’s registry entry marks it as required.
Optional settings from the registry entry, left out of the block above:
CTFD_ADMIN_TOKEN (CTFd API access token (preferred authentication method)), CTFD_SESSION_COOKIE (Full CTFd session cookie, e.g. session=abc), CTFD_USERNAME (Username for CTFd form login), CTFD_PASSWORD (Password for CTFd form login), CTFD_HTTP_TIMEOUT (Per-request HTTP timeout in seconds (default 15)).
Alternatives to CTFd
same job, measured the same wayQuery trust scores for MCP servers and agent skills. Check if a tool is safe.
MCP server for GroupDocs.Conversion — convert, inspect, and list supported formats via AI agents.
MCP server for Manticore Search — lets AI assistants query and manage search databases.
MCP server for Trello — manage boards, lists, cards, attachments and more via Claude or Gemini
MCP server for S.C.A.L.A. Score API — let Claude, ChatGPT, and AI agents search 250M+ companies
MCP server for Site Spy — lets AI agents monitor websites for changes
Keyless MCP server for Reddit search via Arctic Shift: posts and comments by subreddit and query.
MCP server for discovering and controlling TP-Link Tapo smart home devices via AI Agents
CTFd — questions
Answers built from our own checks of this server.