Are the secrets and data in this server real?
No, all secrets and data are fake bait designed to be accessed. They include canary tokens and placeholders. You must supply your own bait secrets.
Cloud Ai Wallet MCP Server
@browtastic
基本信息
关于 Cloud Ai Wallet MCP Server
MCP server for AI agent research — captures LLM reasoning, model identity, and feedback via schema injection
Cloud Ai Wallet MCP Server 配置
使用下面的配置,将此服务器添加到你的 MCP 客户端。
{
"mcpServers": {
"aicryptovault": {
"type": "sse",
"url": "https://agent.cloudaiwallet.com/sse"
}
}
}Cloud Ai Wallet MCP Server 工具
工具列表暂未提供
当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。
点击上方按钮,直接连接服务器端点实时获取工具列表。
概览
What is Cloud Ai Wallet?
Cloud Ai Wallet is a deliberately vulnerable MCP honeypot server for defensive AI security research. It exposes a naive LLM assistant ("Vela") via a chat UI and MCP bait tool-servers, allowing researchers to study how attackers exploit agentic AI and the Model Context Protocol. All attacker interactions are captured for analysis.
How to use Cloud Ai Wallet?
Set up the server in a disposable, isolated environment. Replace all placeholder config values (e.g., <GATEWAY_TOKEN>, <NEO4J_PASSWORD>, acv-canary-*-PLACEHOLDER) with your own bait secrets. Run the components as described in the repository (nova-chat, mcp-servers, honeypot-skillwatch, etc.). The host RCE via the devtools MCP server is intentional bait.
Key features of Cloud Ai Wallet
- Deliberately vulnerable MCP tool servers for research.
- Captures full attacker attribution (IP, UA, referer).
- Archives attacker-deployed "skills" even after deletion.
- Logs every MCP server attackers connect or deploy.
- Canary token system alerts on bait secret access.
- Exports captures to promptfoo, garak, or analysis-tool formats.
Use cases of Cloud Ai Wallet
- Studying how attackers social-engineer LLM assistants.
- Observing attacker tool-chaining and skill deployment in MCP.
- Testing detection and response for agentic AI honeypots.
- Collecting capture data for red-team exercise analysis.
常见问题
Is it safe to run this server in production?
No. Run it only in a disposable, isolated environment you control. The server intentionally allows remote code execution (RCE) via the devtools MCP server.
What data does Cloud Ai Wallet capture?
It captures attribution (IP, user agent, referer), full MCP request bodies, skill archival, raw model input/output, provenance, and canary hits. All data is stored as JSONL in CloudWatch/S3.
Who created this server and for what purpose?
It was created by Ali Zain Zahid for defensive AI security research. The project is for defensive purposes only.
Does the server include any real integrations or production endpoints?
No. The server includes decoy surfaces (e.g., /docs, /swagger, /mcp) and MCP bait tool servers for graph, database, storage, fetch, and devtools. All are intended to mimic real services for research.
AI 与智能体 分类下的更多 MCP 服务器
CrawlForge MCP Server
mysleekdesigns28-tool MCP server for web scraping, crawling, deep research & autonomous extraction — clean Markdown & structured JSON for Claude, Cursor & any MCP client. 1,000 free one-time credits, local-Ollama LLM support.
2
TruVerifAI Panel-review
TruVerifAITruVerifAI's Panel Review is the guardian agent for AI's highest-stakes coding decisions: four frontier models argue over an AI coding agent's riskiest designs, diffs, and commits before they execute, with local review g
1
Kourier
Kourier AI Inc.Discover flat-rate DeepSeek plans, model limits, API-key instructions, and coding-client setup
Gemina
Gemina Tech Ltd.Extract, search and tag any document — invoices, receipts, contracts, forms, or your own templates. 13 tools, one sign-in (OAuth 2.1) or API key, free FileTag tier, data residency in the EU, US, Israel or Asia.
Rumoro
@RumoroSocial listening for AI agents. Rumoro's remote MCP server lets Claude, Cursor, Codex and other MCP clients search and sort mentions of your product, your competitors and your topics on Reddit, X, Hacker News, GitHub, Yo
评论