CAIN-42 MCPGateAttack lab
Each button builds a real package from four sample records, then verifies it, sometimes after changing it first.
4 attacks 1 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| control | An untouched package verifies | POST /product-demo/worm-notary/run | Signature, chain and Merkle root all hold. |
| attack | Change a DENY to ALLOW | POST /product-demo/worm-notary/run | The edit is detected. |
| attack | Delete a record | POST /product-demo/worm-notary/run | The gap is detected. |
| attack | Reorder two records | POST /product-demo/worm-notary/run | The new order is detected. |
| attack | Check against a different trusted key | POST /product-demo/worm-notary/run | A package from an untrusted key is refused. |
Each button runs on sample records, on the live engine. Rate limited per address.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.