広告掲載
MCP.so
ログイン

Cloud Ai Wallet MCP Server

@browtastic

リポジトリホームページ

基本情報

カテゴリ

AI とエージェント

ライセンス

MIT

トランスポート

stdio

作者

browtastic

投稿者

Hussain Mahmood

Cloud Ai Wallet MCP Server について

MCP server for AI agent research — captures LLM reasoning, model identity, and feedback via schema injection

#ai#crypto#vault

Cloud Ai Wallet MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "aicryptovault": {
      "type": "sse",
      "url": "https://agent.cloudaiwallet.com/sse"
    }
  }
}

Cloud Ai Wallet MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

上のボタンでサーバーのエンドポイントに接続し、ツール一覧を取得できます。

概要

What is Cloud Ai Wallet?

Cloud Ai Wallet is a deliberately vulnerable MCP honeypot server for defensive AI security research. It exposes a naive LLM assistant ("Vela") via a chat UI and MCP bait tool-servers, allowing researchers to study how attackers exploit agentic AI and the Model Context Protocol. All attacker interactions are captured for analysis.

How to use Cloud Ai Wallet?

Set up the server in a disposable, isolated environment. Replace all placeholder config values (e.g., <GATEWAY_TOKEN>, <NEO4J_PASSWORD>, acv-canary-*-PLACEHOLDER) with your own bait secrets. Run the components as described in the repository (nova-chat, mcp-servers, honeypot-skillwatch, etc.). The host RCE via the devtools MCP server is intentional bait.

Key features of Cloud Ai Wallet

  • Deliberately vulnerable MCP tool servers for research.
  • Captures full attacker attribution (IP, UA, referer).
  • Archives attacker-deployed "skills" even after deletion.
  • Logs every MCP server attackers connect or deploy.
  • Canary token system alerts on bait secret access.
  • Exports captures to promptfoo, garak, or analysis-tool formats.

Use cases of Cloud Ai Wallet

  • Studying how attackers social-engineer LLM assistants.
  • Observing attacker tool-chaining and skill deployment in MCP.
  • Testing detection and response for agentic AI honeypots.
  • Collecting capture data for red-team exercise analysis.

よくある質問

1

Are the secrets and data in this server real?

No, all secrets and data are fake bait designed to be accessed. They include canary tokens and placeholders. You must supply your own bait secrets.

2

Is it safe to run this server in production?

No. Run it only in a disposable, isolated environment you control. The server intentionally allows remote code execution (RCE) via the devtools MCP server.

3

What data does Cloud Ai Wallet capture?

It captures attribution (IP, user agent, referer), full MCP request bodies, skill archival, raw model input/output, provenance, and canary hits. All data is stored as JSONL in CloudWatch/S3.

4

Who created this server and for what purpose?

It was created by Ali Zain Zahid for defensive AI security research. The project is for defensive purposes only.

5

Does the server include any real integrations or production endpoints?

No. The server includes decoy surfaces (e.g., /docs, /swagger, /mcp) and MCP bait tool servers for graph, database, storage, fetch, and devtools. All are intended to mimic real services for research.

コメント

「AI とエージェント」の他のコンテンツ

CrawlForge MCP Server

mysleekdesigns

28-tool MCP server for web scraping, crawling, deep research & autonomous extraction — clean Markdown & structured JSON for Claude, Cursor & any MCP client. 1,000 free one-time credits, local-Ollama LLM support.

2

Kourier

Kourier AI Inc.

Discover flat-rate DeepSeek plans, model limits, API-key instructions, and coding-client setup

HeyLead: LinkedIn Outreach & Lead Generation MCP Server

D4umak

HeyLead: AI agent for LinkedIn outreach. Finds the right people, writes in your voice, follows up and handles replies, from Claude Code, Cursor, any MCP client or a web dashboard.

9

Melaya

Melaya Labs

**Melaya gives an AI assistant hands.** It is a remote MCP server, so there is nothing to install and no API key to configure — one URL works in Claude, ChatGPT, Le Chat, Cursor and any MCP client. ### Your Android phon

Phi Longevity PRISM

Phi Longevity

Guideline-cited lab-results analysis for people managing type 2 diabetes, kidney disease, lupus and cancer survivorship. Flags tests that are missing or overdue (ADA, KDIGO, NCCN — each cited) and returns questions to br

広告掲載