MCP.so
Sign In

Cloud Ai Wallet

@browtastic

RepositoryHomepage

About Cloud Ai Wallet

MCP server for AI agent research — captures LLM reasoning, model identity, and feedback via schema injection

#ai#crypto#vault

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "aicryptovault": {
      "type": "sse",
      "url": "https://agent.cloudaiwallet.com/sse"
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Cloud Ai Wallet?

Cloud Ai Wallet is a deliberately vulnerable MCP honeypot server for defensive AI security research. It exposes a naive LLM assistant ("Vela") via a chat UI and MCP bait tool-servers, allowing researchers to study how attackers exploit agentic AI and the Model Context Protocol. All attacker interactions are captured for analysis.

How to use Cloud Ai Wallet?

Set up the server in a disposable, isolated environment. Replace all placeholder config values (e.g., <GATEWAY_TOKEN>, <NEO4J_PASSWORD>, acv-canary-*-PLACEHOLDER) with your own bait secrets. Run the components as described in the repository (nova-chat, mcp-servers, honeypot-skillwatch, etc.). The host RCE via the devtools MCP server is intentional bait.

Key features of Cloud Ai Wallet

  • Deliberately vulnerable MCP tool servers for research.
  • Captures full attacker attribution (IP, UA, referer).
  • Archives attacker-deployed "skills" even after deletion.
  • Logs every MCP server attackers connect or deploy.
  • Canary token system alerts on bait secret access.
  • Exports captures to promptfoo, garak, or analysis-tool formats.

Use cases of Cloud Ai Wallet

  • Studying how attackers social-engineer LLM assistants.
  • Observing attacker tool-chaining and skill deployment in MCP.
  • Testing detection and response for agentic AI honeypots.
  • Collecting capture data for red-team exercise analysis.

FAQ from Cloud Ai Wallet

Are the secrets and data in this server real?

No, all secrets and data are fake bait designed to be accessed. They include canary tokens and placeholders. You must supply your own bait secrets.

Is it safe to run this server in production?

No. Run it only in a disposable, isolated environment you control. The server intentionally allows remote code execution (RCE) via the devtools MCP server.

What data does Cloud Ai Wallet capture?

It captures attribution (IP, user agent, referer), full MCP request bodies, skill archival, raw model input/output, provenance, and canary hits. All data is stored as JSONL in CloudWatch/S3.

Who created this server and for what purpose?

It was created by Ali Zain Zahid for defensive AI security research. The project is for defensive purposes only.

Does the server include any real integrations or production endpoints?

No. The server includes decoy surfaces (e.g., /docs, /swagger, /mcp) and MCP bait tool servers for graph, database, storage, fetch, and devtools. All are intended to mimic real services for research.

Frequently asked questions

Are the secrets and data in this server real?

No, all secrets and data are fake bait designed to be accessed. They include canary tokens and placeholders. You must supply your own bait secrets.

Is it safe to run this server in production?

No. Run it only in a disposable, isolated environment you control. The server intentionally allows remote code execution (RCE) via the devtools MCP server.

What data does Cloud Ai Wallet capture?

It captures attribution (IP, user agent, referer), full MCP request bodies, skill archival, raw model input/output, provenance, and canary hits. All data is stored as JSONL in CloudWatch/S3.

Who created this server and for what purpose?

It was created by Ali Zain Zahid for defensive AI security research. The project is for defensive purposes only.

Does the server include any real integrations or production endpoints?

No. The server includes decoy surfaces (e.g., /docs, /swagger, /mcp) and MCP bait tool servers for graph, database, storage, fetch, and devtools. All are intended to mimic real services for research.

Comments

Basic information

Category

AI & Agents

License

MIT

Transports

stdio

Author

browtastic

Submitted by

Hussain Mahmood

More AI & Agents MCP servers

Perplexity MCP Server

DaInfernalCoder

A Model Context Protocol (MCP) server for research and documentation assistance using Perplexity AI. Won 1st @ Cline Hackathon

295

Lumify Sports Intelligence

Lumify

Agent-ready sports intelligence API: live scores, odds, line movement, public betting splits, and explainable bet confidence — via 16 MCP tools at https://lumify.ai/mcp. Get a free key instantly — no signup, email, or ca

🔎 GPT Researcher

assafelovic

An autonomous agent that conducts deep research on any data using any LLM providers

28.1K

MCP Client for Ollama (ollmcp)

jonigl

Harness the power of local LLMs with this TUI MCP Client for Ollama. Featuring all core MCP primitives (tools, prompts, resources), agent mode, multi-server, model switching, streaming responses, human-in-the-loop, thinking mode, model params config, system prompts, and saved pre

768

LinkedIn MCP Server

stickerdaniel

Open-source MCP server for LinkedIn. Give Claude and any MCP-compatible AI agent access to profiles, companies, jobs, and messages.

2.7K