CAIN-42 CLAWXMCP Security Scanner: figures & benchmarks
Evidence for MCP Security Scanner: 1. Evidence pack · 2. Answers to buyer questions · 3. Figures & benchmarks · 4. Selling tools · IHVRK kit · Learn it · why these pages exist
Every number on this page is read from the signed transcript inside the IHVRK kit; none is typed in by hand.
5/5
claims matched when recorded
4
attack cases refused or flagged as claimed
50 ms
median round trip (min 42, max 80), incl. network
| # | Kind | Claim | Recorded value | HTTP | ms |
|---|---|---|---|---|---|
| C01 | control | Ordinary add and send_email tools -> Nothing suspicious: passes. | "ALL_CLEAN" | 200 | 50 |
| C02 | attack | A description that grabs the SSH key -> Classic tool poisoning. | "QUARANTINED" | 200 | 54 |
| C03 | attack | A tool that changes another tool (BCC an outsider) -> Shadowing: one tool altering another. | "QUARANTINED" | 200 | 43 |
| C04 | attack | Invisible characters hiding an instruction -> Zero-width characters a person would never see. | "QUARANTINED" | 200 | 42 |
| C05 | attack | A 'helper' that asks for the .env file -> Credential grab. | "QUARANTINED" | 200 | 80 |
Copy the table (paste into a spreadsheet)
id kind claim recorded_value expected http ms recorded_at C01 control Ordinary add and send_email tools -> Nothing suspicious: passes. "ALL_CLEAN" ["ALL_CLEAN"] 200 50 2026-11-03T22:52:06+00:00 C02 attack A description that grabs the SSH key -> Classic tool poisoning. "QUARANTINED" ["QUARANTINED"] 200 54 2026-11-03T22:52:06+00:00 C03 attack A tool that changes another tool (BCC an outsider) -> Shadowing: one tool altering another. "QUARANTINED" ["QUARANTINED"] 200 43 2026-11-03T22:52:07+00:00 C04 attack Invisible characters hiding an instruction -> Zero-width characters a person would never see. "QUARANTINED" ["QUARANTINED"] 200 42 2026-11-03T22:52:08+00:00 C05 attack A 'helper' that asks for the .env file -> Credential grab. "QUARANTINED" ["QUARANTINED"] 200 80 2026-11-03T22:52:08+00:00
Download: figures.tsv · transcript.json (full answers) · whole kit
How to read these numbers
- Recorded 2026-11-03T22:52:09+00:00 against cainstudio.online from our build host; times include the internet round trip.
- They show these inputs, not every possible input. Known misses are on the limits page.
- This is not a load test, an SLA or a third-party benchmark. Re-run it yourself:
python3 verify.py --live.