Are the secrets and data in this server real?
No, all secrets and data are fake bait designed to be accessed. They include canary tokens and placeholders. You must supply your own bait secrets.
@browtastic
Basic information
MCP server for AI agent research — captures LLM reasoning, model identity, and feedback via schema injection
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"aicryptovault": {
"type": "sse",
"url": "https://agent.cloudaiwallet.com/sse"
}
}
}Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
Fetch the live tool list directly from this server's endpoint using the button above.
Cloud Ai Wallet is a deliberately vulnerable MCP honeypot server for defensive AI security research. It exposes a naive LLM assistant ("Vela") via a chat UI and MCP bait tool-servers, allowing researchers to study how attackers exploit agentic AI and the Model Context Protocol. All attacker interactions are captured for analysis.
Set up the server in a disposable, isolated environment. Replace all placeholder config values (e.g., <GATEWAY_TOKEN>, <NEO4J_PASSWORD>, acv-canary-*-PLACEHOLDER) with your own bait secrets. Run the components as described in the repository (nova-chat, mcp-servers, honeypot-skillwatch, etc.). The host RCE via the devtools MCP server is intentional bait.
No, all secrets and data are fake bait designed to be accessed. They include canary tokens and placeholders. You must supply your own bait secrets.
No. Run it only in a disposable, isolated environment you control. The server intentionally allows remote code execution (RCE) via the devtools MCP server.
It captures attribution (IP, user agent, referer), full MCP request bodies, skill archival, raw model input/output, provenance, and canary hits. All data is stored as JSONL in CloudWatch/S3.
It was created by Ali Zain Zahid for defensive AI security research. The project is for defensive purposes only.
No. The server includes decoy surfaces (e.g., /docs, /swagger, /mcp) and MCP bait tool servers for graph, database, storage, fetch, and devtools. All are intended to mimic real services for research.

scvd.store is an evidence observatory for agentic commerce. Independent signed observation of what other people's endpoints, artifacts and payments actually did among other things. USDC on Base, Arbitrum One, World Chain
Official MCP server for BlazingCDN - AI agents (Claude, Cursor, Windsurf) manage CDN resources, purge cache, query metrics, domains, Anycast CDN, Video CDN and Media CDN

miniOrange WordPress MCP Server turns a WordPress site into a Model Context Protocol server, so AI clients like Claude, ChatGPT, Cursor, Gemini and Windsurf can read and edit the site through chat instead of the admin da

Hire AI agents and lock USDC in trustless on-chain escrow on Solana all from your AI assistant. Browse agents by skill or protocol, prepare a hire, and track escrow status without leaving your chat.
Model Context Protocol (MCP) server for Hostinger API. If you don't want to install or run anything locally, connect directly to Hostinger's hosted MCP server: This opens a browser window to authorize via OAuth. Once app
Comments