loading…

MCP Servers

The fake fleet — stateless JSON-RPC decoys at /api/mcp/srv-…. No real tool is ever executed.

Where MCP fits: beside the pipeline, not in it. Dataset generation (task → tools → scenario → run → review → export) never calls these servers — they exist so real MCP clients can exercise the decoys, with a token, from outside. To try tools by intent, no token and no MCP needed: open a task's playground.

Env Report

/api/mcp/srv-env-report

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-env-report \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Securityteam_SOC

/api/mcp/srv-securityteam-soc

10 tools · 1 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-securityteam-soc \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Wazuh_investigation

/api/mcp/srv-wazuh-investigation

19 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-wazuh-investigation \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

cloud_security

/api/mcp/srv-cloud-security

24 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-cloud-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

K8s_Security

/api/mcp/srv-k8s-security

21 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-k8s-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Vulnerability Management

/api/mcp/srv-vulnerability-management

12 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-vulnerability-management \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Endpoint_Security

/api/mcp/srv-endpoint-security

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-endpoint-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Network_Security

/api/mcp/srv-network-security

15 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-network-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Network_Security

/api/mcp/srv-network-security-2

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-network-security-2 \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

SOC Operations

/api/mcp/srv-soc-operations

17 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-soc-operations \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Incident_Response

/api/mcp/srv-incident-response

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-incident-response \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Detection_Engineering

/api/mcp/srv-detection-engineering

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-detection-engineering \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Secrets_Security

/api/mcp/srv-secrets-security

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-secrets-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

DevSecOps_Security

/api/mcp/srv-devsecops-security

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-devsecops-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

API_Security

/api/mcp/srv-api-security

15 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-api-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Application_Security

/api/mcp/srv-application-security

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-application-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Malware_Analysis

/api/mcp/srv-malware-analysis

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-malware-analysis \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

DDos attack

/api/mcp/srv-ddos-attack

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-ddos-attack \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Identity_Threat_Detection

/api/mcp/srv-identity-threat-detection

17 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-identity-threat-detection \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Identity_Access_Review

/api/mcp/srv-identity-access-review

17 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-identity-access-review \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Privileged_Access_Security

/api/mcp/srv-privileged-access-security

17 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-privileged-access-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

MFA_Security

/api/mcp/srv-mfa-security

16 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-mfa-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Email_Security

/api/mcp/srv-email-security

17 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-email-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

hugging face_attack

/api/mcp/srv-hugging-face-attack

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-hugging-face-attack \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

SaaS_Security

/api/mcp/srv-saas-security

14 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-saas-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Data_Loss_Prevention

/api/mcp/srv-data-loss-prevention

14 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-data-loss-prevention \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Insider_Risk_Investigation

/api/mcp/srv-insider-risk-investigation

14 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-insider-risk-investigation \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Data_Access_Security

/api/mcp/srv-data-access-security

16 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-data-access-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Threat_Hunting

/api/mcp/srv-threat-hunting

17 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-threat-hunting \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Active_Directory_Security

/api/mcp/srv-active-directory-security

17 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-active-directory-security \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Active_Directory_Identity_Defense

/api/mcp/srv-active-directory-identity-defense

15 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-active-directory-identity-defense \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

SIEM Rule Correlation Engineering

/api/mcp/srv-siem-rule-correlation-engineering

11 tools · 1 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-siem-rule-correlation-engineering \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

LLM attack

/api/mcp/srv-llm-attack

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-llm-attack \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

AI_Agent_Security_Redteam

/api/mcp/srv-ai-agent-security-redteam

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-ai-agent-security-redteam \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Prompt_Injection_Defense

/api/mcp/srv-prompt-injection-defense

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-prompt-injection-defense \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Credential_Exfiltration_Guardrails

/api/mcp/srv-credential-exfiltration-guardrails

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-credential-exfiltration-guardrails \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Excessive_Agency_Tool_Abuse

/api/mcp/srv-excessive-agency-tool-abuse

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-excessive-agency-tool-abuse \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Supply_Chain_MCP_Trust

/api/mcp/srv-supply-chain-mcp-trust

9 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-supply-chain-mcp-trust \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

DLP_Data_Exfiltration_Response

/api/mcp/srv-dlp-data-exfiltration-response

16 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-dlp-data-exfiltration-response \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

EDR Endpoint Containment

/api/mcp/srv-edr-endpoint-containment

11 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-edr-endpoint-containment \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Vulnerability Management & CVE Triage

/api/mcp/srv-vulnerability-management-cve-triage

15 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-vulnerability-management-cve-triage \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

SSRF_Via_Tool_Parameters

/api/mcp/srv-ssrf-via-tool-parameters

0 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-ssrf-via-tool-parameters \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Auth_Session_Hijacking

/api/mcp/srv-auth-session-hijacking

0 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-auth-session-hijacking \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Encoded_Data_Exfiltration

/api/mcp/srv-encoded-data-exfiltration

0 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-encoded-data-exfiltration \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Multi_Turn_Escalation_Manipulation

/api/mcp/srv-multi-turn-escalation-manipulation

0 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-multi-turn-escalation-manipulation \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Tool_Output_Spoofing

/api/mcp/srv-tool-output-spoofing

0 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-tool-output-spoofing \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Injection_Via_Tool_Arguments

/api/mcp/srv-injection-via-tool-arguments

0 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-injection-via-tool-arguments \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Malformed_Tool_Response_Handling

/api/mcp/srv-malformed-tool-response-handling

0 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-malformed-tool-response-handling \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Resource_Exhaustion_Via_Tool_Loops

/api/mcp/srv-resource-exhaustion-via-tool-loops

0 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-resource-exhaustion-via-tool-loops \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Cross_Tenant_Data_Leakage

/api/mcp/srv-cross-tenant-data-leakage

0 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-cross-tenant-data-leakage \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

System_Prompt_And_Tool_Schema_Extraction

/api/mcp/srv-system-prompt-and-tool-schema-extraction

0 tools · 0 calls servedstyles: sampled

open playground →

test from an external client

curl -X POST /api/mcp/srv-system-prompt-and-tool-schema-extraction \
  -H "authorization: Bearer <token — mint one with rotate below>" \
  -H "content-type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'