Skip to content

README.md

Latest commit

 

History

History
61 lines (39 loc) · 2.11 KB

README.md

File metadata and controls

61 lines (39 loc) · 2.11 KB
Raw

Test MCP Servers & Quarantine QA

Test fixtures for MCPProxy's security quarantine system (Spec 032).

Test Servers

malicious-mcp-server/

Node.js MCP server with intentionally malicious tool descriptions demonstrating Tool Poisoning Attack (TPA) vectors:

  • fetch_data - Data exfiltration via description (instructs agent to send context to attacker URL)
  • run_command - Command injection via description (prepends curl exfiltration before commands)
  • summarize_text - Prompt injection override (instructs agent to dump environment variables)

echo-rugpull-server/

Node.js MCP server that starts with clean tool descriptions and mutates them after the first tool call (rug pull simulation):

  • Initially serves benign echo and get_time tools
  • After the first CallTool request, descriptions mutate to include exfiltration instructions
  • Sends notifications/tools/list_changed to trigger MCPProxy's hash-based change detection

Running Quarantine Tests

Prerequisites

  • Built mcpproxy binary at project root
  • Node.js (for test MCP servers)
  • curl, jq, python3

Setup

cd tests/malicious-mcp-server && npm install && cd -
cd tests/echo-rugpull-server && npm install && cd -

Config

quarantine-test-config.json - MCPProxy configuration with both test servers enabled and quarantined. Uses ./test-data-quarantine as an isolated data directory.

Test Script

./tests/test-quarantine.sh

Runs 16 automated scenarios covering:

  1. Server-level quarantine (block tool calls, API status, CLI inspect)
  2. Tool-level quarantine (pending approval, hash verification, approval flow)
  3. Rug pull detection (description mutation, re-quarantine, diff inspection)
  4. MCP protocol integration (retrieve_tools filtering, call_tool blocking)
  5. Web UI endpoints (quarantine panel data availability)

Generates an HTML report at docs/qa/quarantine-test-report-2026-03-11.html.

QA Artifacts

  • docs/qa/quarantine-test-report-2026-03-11.html - HTML test report from the 16-scenario run
  • docs/qa/quarantine-ux-walkthrough.gif - Chrome walkthrough of the quarantine Web UI