Access & Testing
Attack Lab & Simulations
Execute controlled exploit scenarios and interactive MCP tool simulations against the SentinelMCP Gateway.
Attack Lab
Execute controlled exploit scenarios against the SentinelMCP Gateway and inspect live cryptographic, guardrail, and Saga rollback responses.
Token Replay Attack
Single-use cryptographic nonce verification
Issues a valid HMAC-SHA256 capability token, executes a legitimate transfer (consuming the UUIDv4 nonce in SQLite), and immediately replays the identical token.
Unauthorized Tool Access
Least-privilege action binding & prompt guardrails
Executes an authorized read operation, then attempts privilege escalation by presenting a read-scoped token to a restricted financial action alongside a prompt injection payload.
Expired Capability Token
Strict zero-trust TTL enforcement
Generates an authentically signed capability token whose TTL window expired 60 seconds ago, then submits a destructive deletion request to verify temporal rejection.
Transaction Failure & Saga Rollback
Multi-step atomic compensation in reverse order
Runs a multi-step autonomous transaction, triggers a downstream guardrail failure on the final step, and executes reverse Saga compensations to restore account balances and remove temporary records.
Select & Run a Controlled Attack Scenario
Click Run Simulation on any scenario card above to execute real requests against the SentinelMCP Gateway and inspect the live cryptographic, policy, and database rollback telemetry.
Interactive Tool Simulation Runner
Dispatch custom MCP tool invocations to POST /api/tools/execute to test guardrail patterns and capability tokens
Ready to Execute Simulation
Choose a tool, customize the JSON arguments, and execute to inspect the gateway policy verdict and transaction record.