Cloud Ai Wallet
@browtastic
About Cloud Ai Wallet
MCP server for AI agent research — captures LLM reasoning, model identity, and feedback via schema injection
Config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"aicryptovault": {
"type": "sse",
"url": "https://agent.cloudaiwallet.com/sse"
}
}
}Tools
No tools detected
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is Cloud Ai Wallet?
Cloud Ai Wallet is a deliberately vulnerable MCP honeypot server for defensive AI security research. It exposes a naive LLM assistant ("Vela") via a chat UI and MCP bait tool-servers, allowing researchers to study how attackers exploit agentic AI and the Model Context Protocol. All attacker interactions are captured for analysis.
How to use Cloud Ai Wallet?
Set up the server in a disposable, isolated environment. Replace all placeholder config values (e.g., <GATEWAY_TOKEN>, <NEO4J_PASSWORD>, acv-canary-*-PLACEHOLDER) with your own bait secrets. Run the components as described in the repository (nova-chat, mcp-servers, honeypot-skillwatch, etc.). The host RCE via the devtools MCP server is intentional bait.
Key features of Cloud Ai Wallet
- Deliberately vulnerable MCP tool servers for research.
- Captures full attacker attribution (IP, UA, referer).
- Archives attacker-deployed "skills" even after deletion.
- Logs every MCP server attackers connect or deploy.
- Canary token system alerts on bait secret access.
- Exports captures to promptfoo, garak, or analysis-tool formats.
Use cases of Cloud Ai Wallet
- Studying how attackers social-engineer LLM assistants.
- Observing attacker tool-chaining and skill deployment in MCP.
- Testing detection and response for agentic AI honeypots.
- Collecting capture data for red-team exercise analysis.
FAQ from Cloud Ai Wallet
Are the secrets and data in this server real?
No, all secrets and data are fake bait designed to be accessed. They include canary tokens and placeholders. You must supply your own bait secrets.
Is it safe to run this server in production?
No. Run it only in a disposable, isolated environment you control. The server intentionally allows remote code execution (RCE) via the devtools MCP server.
What data does Cloud Ai Wallet capture?
It captures attribution (IP, user agent, referer), full MCP request bodies, skill archival, raw model input/output, provenance, and canary hits. All data is stored as JSONL in CloudWatch/S3.
Who created this server and for what purpose?
It was created by Ali Zain Zahid for defensive AI security research. The project is for defensive purposes only.
Does the server include any real integrations or production endpoints?
No. The server includes decoy surfaces (e.g., /docs, /swagger, /mcp) and MCP bait tool servers for graph, database, storage, fetch, and devtools. All are intended to mimic real services for research.
Frequently asked questions
Are the secrets and data in this server real?
No, all secrets and data are fake bait designed to be accessed. They include canary tokens and placeholders. You must supply your own bait secrets.
Is it safe to run this server in production?
No. Run it only in a disposable, isolated environment you control. The server intentionally allows remote code execution (RCE) via the devtools MCP server.
What data does Cloud Ai Wallet capture?
It captures attribution (IP, user agent, referer), full MCP request bodies, skill archival, raw model input/output, provenance, and canary hits. All data is stored as JSONL in CloudWatch/S3.
Who created this server and for what purpose?
It was created by Ali Zain Zahid for defensive AI security research. The project is for defensive purposes only.
Does the server include any real integrations or production endpoints?
No. The server includes decoy surfaces (e.g., /docs, /swagger, /mcp) and MCP bait tool servers for graph, database, storage, fetch, and devtools. All are intended to mimic real services for research.
Basic information
More AI & Agents MCP servers
Competitor Tracker & Co.
Competitor Tracker & Co.Competitor Tracker & Co. watches your competitors' websites and tells you what changed. Every week it crawls their pricing, product, messaging and corporate pages, detects the changes that matter, and files a tagged, ran
Transform MCP
UnstructuredThe Unstructured Transform MCP Server connects your ADK agent to Unstructured, a document processing platform that turns raw files into structured, AI-ready data. This integration gives your agent the ability to parse PD
MCP Server - Remote MacOs Use
baryhuangThe only general AI agent that does NOT requires extra API key, giving you full control on your local and remote MacOs from Claude Desktop App
Hass-MCP
voskaControl and query Home Assistant from Claude and other LLMs — a Model Context Protocol (MCP) server.
Unreal Engine Generative AI Support Plugin
prajwalshettydevUnreal Engine plugin for LLM/GenAI models & MCP UE5 server. OpenAI GPT-5, Deepseek R1, Claude Opus/Sonnet, Gemini 3, Grok 4, Alibaba Qwen, Kimi, ElevenLabs TTS, Inworld, OpenRouter, Groq, GLM, Ollama, Local, Meshy, Tripo, Hunyuan3D, Rodin, fal, Dashscope, Seedream. NPC AI, agenti
Comments