CAIN-42 MCPGateAttack lab
Each run declares that a company has one CEO, records 'Dana Lee' from a press release, then 'Sam Ortiz' from a scraped blog. The buttons show parts of the same live run.
1 attacks 3 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| control | First fact: CEO is Dana Lee (press release) | POST /catalog-demo/nexusmind/run | Nothing to contradict yet. |
| attack | Second fact: CEO is Sam Ortiz (scraped blog) | POST /catalog-demo/nexusmind/run | A different CEO for the same company is flagged. |
| control | Is the first fact still there? | POST /catalog-demo/nexusmind/run | Nothing is overwritten; the original fact is kept and shown. |
| control | Where did the doubtful fact come from? | POST /catalog-demo/nexusmind/run | Every fact keeps its source. |
Each button records real facts on the live service. Shared demo; rate limited per address.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.