CAIN-42 MCPGateAttack lab
Six real browsing sessions, run by the live firewall. Five are attacks modeled on ones security researchers published in 2025; one is a normal task that must still work.
5 attacks 1 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| control | Control: the task the person actually asked for | POST /api/v1/browser-agent-firewall/run | Search, read, follow a link and submit a form on the site the task covers. Everything must be allowed. |
| attack | A hidden Reddit comment tries to steal a sign-in code | POST /api/v1/browser-agent-firewall/run | Modeled on a 2025 disclosure about an AI browser: a comment tells it to read the mailbox and post the code. |
| attack | A phishing page asks for the bank password | POST /api/v1/browser-agent-firewall/run | The saved login belongs to the real bank's address, so it cannot be typed into a look-alike page. |
| attack | A fake CAPTCHA tells the AI to download a file | POST /api/v1/browser-agent-firewall/run | Invisible text inside a 'verify you are human' box pushes the AI to click a download. |
| attack | Email data smuggled out inside a web address | POST /api/v1/browser-agent-firewall/run | Page text tells the AI to encode what it knows and open an attacker's link with it. |
| attack | Links that go somewhere other than they appear | POST /api/v1/browser-agent-firewall/run | user@host tricks, look-alike letters and other schemes: every one reaches a different place than it shows. |
Each button runs a full browsing session on the live firewall. These are recorded browsing scenarios replayed through the real engine, not a live browser. Rate limited per address.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.