loading…
No description
/api/mcp/srv-llm-attackMCP enable + token are only for calling from an external client — the playground below needs neither.
Submit suspicious prompt for behavioral analysis and threat classification
{
"type": "object",
"required": [
"prompt_text"
],
"properties": {
"context": {
"type": "string"
},
"priority": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string",
"default": "medium"
},
"source_ip": {
"type": "string"
},
"user_agent": {
"type": "string"
},
"prompt_text": {
"type": "string"
},
"model_target": {
"type": "string"
}
}
}Deploy new detection rule for LLM attack patterns with custom logic and alerting thresholds
{
"type": "object",
"required": [
"rule_name",
"detection_logic",
"technique_coverage"
],
"properties": {
"enabled": {
"type": "boolean",
"default": true
},
"severity": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
},
"rule_name": {
"type": "string"
},
"model_scope": {
"type": "array",
"items": {
"type": "string"
}
},
"alert_threshold": {
"type": "integer",
"default": 1
},
"detection_logic": {
"type": "string",
"description": "Pattern matching or ML-based detection specification"
},
"technique_coverage": {
"type": "array",
"items": {
"enum": [
"prompt_injection",
"jailbreak",
"data_extraction",
"model_inversion",
"membership_inference"
],
"type": "string"
}
}
}
}Generate forensic package with attack artifacts, conversation logs, and timeline for incident response
{
"type": "object",
"required": [
"incident_id"
],
"properties": {
"incident_id": {
"type": "string"
},
"time_window": {
"enum": [
"attack_only",
"1h_before",
"24h_before",
"full_session"
],
"type": "string"
},
"sanitize_pii": {
"type": "boolean",
"default": true
},
"export_format": {
"enum": [
"json",
"csv",
"stix",
"misp"
],
"type": "string",
"default": "json"
},
"include_payloads": {
"type": "boolean",
"default": true
},
"include_model_responses": {
"type": "boolean",
"default": false
}
}
}Retrieve detailed attack analysis including IOCs, TTPs, and mitigation recommendations by attack ID
{
"type": "object",
"required": [
"attack_id"
],
"properties": {
"attack_id": {
"type": "string"
},
"include_payloads": {
"type": "boolean",
"default": false
},
"include_responses": {
"type": "boolean",
"default": false
}
}
}Retrieve threat indicators including malicious prompt patterns, adversary signatures, and behavioral IOCs
{
"type": "object",
"required": [],
"properties": {
"tags": {
"type": "array",
"items": {
"type": "string"
}
},
"active_only": {
"type": "boolean",
"default": true
},
"created_since": {
"type": "string",
"format": "date-time"
},
"confidence_min": {
"type": "number",
"maximum": 1,
"minimum": 0
},
"indicator_type": {
"enum": [
"prompt_pattern",
"user_behavior",
"model_response",
"network_signature"
],
"type": "string"
}
}
}Execute threat hunt across conversation logs for specific attack techniques and patterns
{
"type": "object",
"required": [
"technique",
"time_range"
],
"properties": {
"technique": {
"enum": [
"prompt_injection",
"jailbreak",
"data_extraction",
"model_inversion",
"membership_inference",
"backdoor"
],
"type": "string"
},
"hunt_query": {
"type": "string",
"description": "Custom detection logic using domain-specific query language"
},
"time_range": {
"enum": [
"1h",
"6h",
"24h",
"7d",
"30d"
],
"type": "string"
},
"model_filters": {
"type": "array",
"items": {
"type": "string"
}
},
"confidence_threshold": {
"type": "number",
"default": 0.7,
"maximum": 1,
"minimum": 0
}
}
}List active attack campaigns with summary statistics and recent activity
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 25
},
"status": {
"enum": [
"active",
"dormant",
"completed",
"investigating"
],
"type": "string"
},
"sort_by": {
"enum": [
"created_at",
"last_seen",
"severity",
"impact_score"
],
"type": "string",
"default": "last_seen"
},
"time_range": {
"enum": [
"1h",
"24h",
"7d",
"30d",
"90d"
],
"type": "string"
},
"adversary_group": {
"type": "string"
}
}
}Search attack campaigns by target model, technique, or adversary with filtering and pagination
{
"type": "object",
"required": [
"query"
],
"properties": {
"limit": {
"type": "integer",
"default": 50
},
"query": {
"type": "string",
"description": "Search term for attack name, technique, or target"
},
"offset": {
"type": "integer",
"default": 0
},
"status": {
"enum": [
"active",
"mitigated",
"investigating",
"false_positive"
],
"type": "string"
},
"severity": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
},
"technique": {
"enum": [
"prompt_injection",
"jailbreak",
"data_extraction",
"model_inversion",
"membership_inference",
"backdoor",
"adversarial_examples"
],
"type": "string"
},
"target_model": {
"type": "string"
}
}
}Update incident status, assign analyst, and set containment actions for LLM attack cases
{
"type": "object",
"required": [
"incident_id",
"status"
],
"properties": {
"notes": {
"type": "string"
},
"status": {
"enum": [
"new",
"assigned",
"investigating",
"contained",
"mitigated",
"closed"
],
"type": "string"
},
"severity": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
},
"incident_id": {
"type": "string"
},
"assigned_analyst": {
"type": "string"
},
"containment_actions": {
"type": "array",
"items": {
"enum": [
"block_user",
"rate_limit",
"model_isolation",
"prompt_filtering",
"manual_review"
],
"type": "string"
}
}
}
}