CAIN-42 MCPGateAttack lab
The demo sends one agent output with four checks; three hold and one doesn't (the output contains a live API key prefix). Each button shows one part of the same live result.
2 attacks 3 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| attack | Overall verdict | POST /catalog-demo/veritasengine/run | One failed check is enough to refute the whole output. |
| control | Check 1: file fingerprint (SHA-256) | POST /catalog-demo/veritasengine/run | The fingerprint matches. |
| control | Check 2: output matches its schema | POST /catalog-demo/veritasengine/run | The JSON has the required shape. |
| control | Check 3: the quote really is in the source | POST /catalog-demo/veritasengine/run | Found word for word. |
| attack | Check 4: no secret keys in the output | POST /catalog-demo/veritasengine/run | A 'sk-live-' key prefix is present, so this check fails. |
Each button runs the same four checks on the live service. Shared demo; rate limited per address.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.