Add Model Context Protocol (MCP) Python/Atheris fuzzer #14077
      
        
          +235
        
        
          −0
        
        
          
        
      
    
  
  Add this suggestion to a batch that can be applied as a single commit.
  This suggestion is invalid because no changes were made to the code.
  Suggestions cannot be applied while the pull request is closed.
  Suggestions cannot be applied while viewing a subset of changes.
  Only one suggestion per line can be applied in a batch.
  Add this suggestion to a batch that can be applied as a single commit.
  Applying suggestions on deleted lines is not supported.
  You must change the existing code in this line in order to create a valid suggestion.
  Outdated suggestions cannot be applied.
  This suggestion has been applied or marked resolved.
  Suggestions cannot be applied from pending reviews.
  Suggestions cannot be applied on multi-line comments.
  Suggestions cannot be applied while the pull request is queued to merge.
  Suggestion cannot be applied right now. Please check back later.
  
    
  
    
This adds a new OSS-Fuzz project for the Model Context Protocol (MCP).
Target repository: https://github.com/modelcontextprotocol/modelcontextprotocol
Language/engine: Python 3 with Atheris (libFuzzer)
Fuzz target: Validates fuzzed JSON documents against the official MCP JSON Schema
Files:
projects/modelcontextprotocol/Dockerfile
projects/modelcontextprotocol/build.sh
projects/modelcontextprotocol/project.yaml
projects/modelcontextprotocol/mcp_schema_fuzzer.py
Contact:
primary_contact: [email protected]
Help URL:
https://github.com/modelcontextprotocol/modelcontextprotocol/issues
Notes:
The fuzzer parses fuzz input as JSON and validates it against the MCP schema using jsonschema. Unexpected exceptions or crashes are reported.
The build uses PyInstaller for a hermetic binary. The wrapper sets MCP_SCHEMA_PATH and places schema.json adjacent to the binary.