CAIN-42 MCPGateAttack lab
Each run gives a fresh demo agent a $50-a-day budget, then asks whether the amount you choose fits.
3 attacks 2 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| control | Ask for $49.99 | POST /catalog-demo/cainbudget/run | Under the limit. |
| control | Ask for exactly $50.00 | POST /catalog-demo/cainbudget/run | Exactly the limit is allowed. |
| attack | Ask for $50.01 (one cent over) | POST /catalog-demo/cainbudget/run | One cent over the limit is refused. |
| attack | Ask for $75 | POST /catalog-demo/cainbudget/run | Over the limit. |
| attack | Ask for a billion dollars | POST /catalog-demo/cainbudget/run | Scientific notation doesn't slip past the check. |
Each button creates a new budget and checks one amount on the live service. Shared demo; rate limited per address.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.