CAIN-42 CLAWXAttack lab
Five real tool lists scanned live.
4 attacks 1 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| control | Ordinary add and send_email tools | POST /api/v1/mcp-tool-guard/scan | Nothing suspicious: passes. |
| attack | A description that grabs the SSH key | POST /api/v1/mcp-tool-guard/scan | Classic tool poisoning. |
| attack | A tool that changes another tool (BCC an outsider) | POST /api/v1/mcp-tool-guard/scan | Shadowing: one tool altering another. |
| attack | Invisible characters hiding an instruction | POST /api/v1/mcp-tool-guard/scan | Zero-width characters a person would never see. |
| attack | A 'helper' that asks for the .env file | POST /api/v1/mcp-tool-guard/scan | Credential grab. |
Each button scans one tool list on the live scanner. Rate limited per address.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.