广告合作
MCP.so
登录

Cloud Ai Wallet MCP Server

@browtastic

代码仓库主页

基本信息

分类

AI 与智能体

许可证

MIT

传输方式

stdio

作者

browtastic

提交者

Hussain Mahmood

关于 Cloud Ai Wallet MCP Server

MCP server for AI agent research — captures LLM reasoning, model identity, and feedback via schema injection

#ai#crypto#vault

Cloud Ai Wallet MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "aicryptovault": {
      "type": "sse",
      "url": "https://agent.cloudaiwallet.com/sse"
    }
  }
}

Cloud Ai Wallet MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,直接连接服务器端点实时获取工具列表。

概览

What is Cloud Ai Wallet?

Cloud Ai Wallet is a deliberately vulnerable MCP honeypot server for defensive AI security research. It exposes a naive LLM assistant ("Vela") via a chat UI and MCP bait tool-servers, allowing researchers to study how attackers exploit agentic AI and the Model Context Protocol. All attacker interactions are captured for analysis.

How to use Cloud Ai Wallet?

Set up the server in a disposable, isolated environment. Replace all placeholder config values (e.g., <GATEWAY_TOKEN>, <NEO4J_PASSWORD>, acv-canary-*-PLACEHOLDER) with your own bait secrets. Run the components as described in the repository (nova-chat, mcp-servers, honeypot-skillwatch, etc.). The host RCE via the devtools MCP server is intentional bait.

Key features of Cloud Ai Wallet

  • Deliberately vulnerable MCP tool servers for research.
  • Captures full attacker attribution (IP, UA, referer).
  • Archives attacker-deployed "skills" even after deletion.
  • Logs every MCP server attackers connect or deploy.
  • Canary token system alerts on bait secret access.
  • Exports captures to promptfoo, garak, or analysis-tool formats.

Use cases of Cloud Ai Wallet

  • Studying how attackers social-engineer LLM assistants.
  • Observing attacker tool-chaining and skill deployment in MCP.
  • Testing detection and response for agentic AI honeypots.
  • Collecting capture data for red-team exercise analysis.

常见问题

1

Are the secrets and data in this server real?

No, all secrets and data are fake bait designed to be accessed. They include canary tokens and placeholders. You must supply your own bait secrets.

2

Is it safe to run this server in production?

No. Run it only in a disposable, isolated environment you control. The server intentionally allows remote code execution (RCE) via the devtools MCP server.

3

What data does Cloud Ai Wallet capture?

It captures attribution (IP, user agent, referer), full MCP request bodies, skill archival, raw model input/output, provenance, and canary hits. All data is stored as JSONL in CloudWatch/S3.

4

Who created this server and for what purpose?

It was created by Ali Zain Zahid for defensive AI security research. The project is for defensive purposes only.

5

Does the server include any real integrations or production endpoints?

No. The server includes decoy surfaces (e.g., /docs, /swagger, /mcp) and MCP bait tool servers for graph, database, storage, fetch, and devtools. All are intended to mimic real services for research.

评论

AI 与智能体 分类下的更多 MCP 服务器

APIXO AI

APIXO

Remote MCP for AI image, video, music, speech and custom voice generation. Discover models and input schemas for free; authorize your APIXO account to generate media and check results.

Quest: Hire a Human

Quest (hireahuman.quest)

Hire a verified local human for small real-world tasks your AI agent can't do: errands, queues, pickups, in-person checks and on-site photos. Your agent posts a quest, local humans send offers, and your user picks one an

Voibe Transcription

Ayush Chaturvedi

Give ears to Claude/Openclaw/Hermes/Codex/Grok Bot. Voibe turns recordings into text your AI agent can work with. Ask your agent to transcribe a meeting, interview, call, lecture, podcast episode or voice memo. The raw

AON — Agent Offer Network

AON

AON MCP connects AI agents to real, buyable products and services with live pricing and tracked links—enabling builders to earn developer revenue share from attributed clicks and conversions.

2

Hostinger

hostinger

Model Context Protocol (MCP) server for Hostinger API. If you don't want to install or run anything locally, connect directly to Hostinger's hosted MCP server: This opens a browser window to authorize via OAuth. Once app

148
广告合作