CAIN-42 MCPGateAttack lab
The public demo shows the roots the verifier trusts. Compare each fingerprint with the chip maker's own published file.
0 attacks 3 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| control | AWS Nitro root fingerprint | POST /catalog-demo/tee-verifier/run | Must equal the SHA-256 of AWS's published Nitro root certificate. |
| control | AMD Milan root (ARK) fingerprint | POST /catalog-demo/tee-verifier/run | Must equal the SHA-256 of AMD's published root key. |
| control | The verifier's own signing key type | POST /catalog-demo/tee-verifier/run | Results are signed so they can be checked later. |
Verifying a real attestation report needs the report itself; the public demo shows what the verifier trusts. Rate limited per address.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.