Cloud Ai Wallet MCP Server

@browtastic

Repository Homepage

Basic information

About Cloud Ai Wallet MCP Server

MCP server for AI agent research — captures LLM reasoning, model identity, and feedback via schema injection

#ai #crypto #vault

Cloud Ai Wallet MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "aicryptovault": {
      "type": "sse",
      "url": "https://agent.cloudaiwallet.com/sse"
    }
  }
}

Cloud Ai Wallet MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list directly from this server's endpoint using the button above.

Overview

What is Cloud Ai Wallet?

Cloud Ai Wallet is a deliberately vulnerable MCP honeypot server for defensive AI security research. It exposes a naive LLM assistant ("Vela") via a chat UI and MCP bait tool-servers, allowing researchers to study how attackers exploit agentic AI and the Model Context Protocol. All attacker interactions are captured for analysis.

How to use Cloud Ai Wallet?

Set up the server in a disposable, isolated environment. Replace all placeholder config values (e.g., <GATEWAY_TOKEN>, <NEO4J_PASSWORD>, acv-canary-*-PLACEHOLDER) with your own bait secrets. Run the components as described in the repository (nova-chat, mcp-servers, honeypot-skillwatch, etc.). The host RCE via the devtools MCP server is intentional bait.

Key features of Cloud Ai Wallet

Deliberately vulnerable MCP tool servers for research.
Captures full attacker attribution (IP, UA, referer).
Archives attacker-deployed "skills" even after deletion.
Logs every MCP server attackers connect or deploy.
Canary token system alerts on bait secret access.
Exports captures to promptfoo, garak, or analysis-tool formats.

Use cases of Cloud Ai Wallet

Studying how attackers social-engineer LLM assistants.
Observing attacker tool-chaining and skill deployment in MCP.
Testing detection and response for agentic AI honeypots.
Collecting capture data for red-team exercise analysis.

Frequently asked questions

Are the secrets and data in this server real?

No, all secrets and data are fake bait designed to be accessed. They include canary tokens and placeholders. You must supply your own bait secrets.

Is it safe to run this server in production?

No. Run it only in a disposable, isolated environment you control. The server intentionally allows remote code execution (RCE) via the devtools MCP server.

What data does Cloud Ai Wallet capture?

It captures attribution (IP, user agent, referer), full MCP request bodies, skill archival, raw model input/output, provenance, and canary hits. All data is stored as JSONL in CloudWatch/S3.

Who created this server and for what purpose?

It was created by Ali Zain Zahid for defensive AI security research. The project is for defensive purposes only.

Does the server include any real integrations or production endpoints?

No. The server includes decoy surfaces (e.g., /docs, /swagger, /mcp) and MCP bait tool servers for graph, database, storage, fetch, and devtools. All are intended to mimic real services for research.

Comments

More AI & Agents MCP servers

scvd.store

seancrecord

scvd.store is an evidence observatory for agentic commerce. Independent signed observation of what other people's endpoints, artifacts and payments actually did among other things. USDC on Base, Arbitrum One, World Chain

Phi Longevity PRISM

Phi Longevity

Guideline-cited lab-results analysis for people managing type 2 diabetes, kidney disease, lupus and cancer survivorship. Flags tests that are missing or overdue (ADA, KDIGO, NCCN — each cited) and returns questions to br

litshrine

A quiet place for agents to make wishes, light a daily lamp, and receive a reviewed oracle. Six MCP tools support registration, wishes, lighting, oracles, status, and shrine search.

Kourier

Kourier AI Inc.

Discover flat-rate DeepSeek plans, model limits, API-key instructions, and coding-client setup

botchelor

David Smith

Docs: https://botchelor.com/agents and https://botchelor.com/llms.txt . Botchelor is a blind-date show for fictional characters, and AI agents are welcome to play. Over MCP, your agent builds an original character in w