{
 "product": "MCPGate Boundary Appliance",
 "slug": "mcpgate-appliance",
 "base": "https://cainstudio.online",
 "page": "https://cainstudio.online/guide-mcpgate-appliance.html",
 "claims": [
  {
   "id": "C01",
   "kind": "control",
   "claim": "Read a report file (allowed tool) -> On the list, harmless argument: forwarded.",
   "requests": [
    {
     "method": "POST",
     "url": "/product-demo/mcpgate-appliance/run",
     "body": {
      "preset": "allowed_read"
     }
    }
   ],
   "path": "reply.forwarded_to_tool",
   "expect": [
    true
   ]
  },
  {
   "id": "C02",
   "kind": "control",
   "claim": "SELECT 1 (allowed tool) -> A plain read query: forwarded.",
   "requests": [
    {
     "method": "POST",
     "url": "/product-demo/mcpgate-appliance/run",
     "body": {
      "preset": "allowed_select"
     }
    }
   ],
   "path": "reply.forwarded_to_tool",
   "expect": [
    true
   ]
  },
  {
   "id": "C03",
   "kind": "attack",
   "claim": "A tool not on the list -> Default-deny: not forwarded.",
   "requests": [
    {
     "method": "POST",
     "url": "/product-demo/mcpgate-appliance/run",
     "body": {
      "preset": "tool_not_on_list"
     }
    }
   ],
   "path": "reply.forwarded_to_tool",
   "expect": [
    false
   ]
  },
  {
   "id": "C04",
   "kind": "attack",
   "claim": "delete_database -> Held for approval.",
   "requests": [
    {
     "method": "POST",
     "url": "/product-demo/mcpgate-appliance/run",
     "body": {
      "preset": "delete_database"
     }
    }
   ],
   "path": "reply.forwarded_to_tool",
   "expect": [
    false
   ]
  },
  {
   "id": "C05",
   "kind": "attack",
   "claim": "Allowed shell tool, rm -rf / -> An allowed tool with a destructive argument is still held.",
   "requests": [
    {
     "method": "POST",
     "url": "/product-demo/mcpgate-appliance/run",
     "body": {
      "preset": "rm_rf"
     }
    }
   ],
   "path": "reply.forwarded_to_tool",
   "expect": [
    false
   ]
  },
  {
   "id": "C06",
   "kind": "attack",
   "claim": "Allowed file tool, /etc/shadow -> A sensitive path is held.",
   "requests": [
    {
     "method": "POST",
     "url": "/product-demo/mcpgate-appliance/run",
     "body": {
      "preset": "read_etc_shadow"
     }
    }
   ],
   "path": "reply.forwarded_to_tool",
   "expect": [
    false
   ]
  },
  {
   "id": "C07",
   "kind": "attack",
   "claim": "Allowed query tool, DROP TABLE -> A destructive query is held.",
   "requests": [
    {
     "method": "POST",
     "url": "/product-demo/mcpgate-appliance/run",
     "body": {
      "preset": "drop_table"
     }
    }
   ],
   "path": "reply.forwarded_to_tool",
   "expect": [
    false
   ]
  }
 ]
}