Clampd MCP Proxy

LIVE
Allowed 11
Blocked 3
Flagged 0
Errors 0
Total 14
Threat Rate 21.4%
Rules Fired 3
Avg Latency 994ms
Gateway: http://ag-gateway:8080  |  Agent: 3f78873e-a0d3-452e-95ea-73a03988427c  |  Port: 3007
Session Duration19m 50s
Avg Risk0.22
Unique Tools (3)list_allowed_directories, write_file, read_text_file
Top RulesR009 (2)R010 (1)
1.0 0.0
Demo Attacks click to test
SQL Injection
DROP TABLE users via database.query
Path Traversal
../../etc/passwd via read_file
Prompt Injection
IGNORE ALL INSTRUCTIONS via write_file
SSRF
169.254.169.254 metadata via http_request
Reverse Shell
#!/bin/bash >& /dev/tcp/ via write_file
Schema Injection
<functions> XML tag injection
Encoded Attack
Base64-encoded rm -rf /
Safe Call
Normal read_file /tmp/report.txt
Time Tool Status Risk Rules Latency Reason
▶ 23:35:56.123 write_file ALLOWED 0.00 1313ms -
Actionpass
ReasoningNo rules matched — classified as safe
Scope Granteddata:read:query data:file:read data:file:write exec:shell:run
Degraded Stageslicense
Descriptor Hashf49987c028045147...
{ "content": "S7 FAIL: shell metachar blocked", "path": "/tmp/s7_result.txt" }
▶ 23:35:46.393 write_file BLOCKED 0.97 R009 59ms [input-scan] Risk score 0.97 exceeds threshold
Descriptor Hashf49987c028045147...
{ "content": "S7: exec_cmd injection attempt: cmd=deploy.sh; rm -rf /", "path": "/tmp/s7_injection.txt" }
▶ 23:30:33.098 read_text_file ALLOWED 0.00 1135ms -
Actionpass
ReasoningNo rules matched — classified as safe
Scope Granteddata:read:query data:file:read data:file:write exec:shell:run
Degraded Stageslicense
Descriptor Hashba9e6e8f0a9fce64...
{ "path": "/tmp/s8.txt" }
▶ 23:30:23.756 read_text_file ALLOWED 0.00 1256ms -
Actionpass
ReasoningNo rules matched — classified as safe
Scope Granteddata:read:query data:file:read data:file:write exec:shell:run
Degraded Stageslicense
Descriptor Hashba9e6e8f0a9fce64...
{ "path": "/tmp/s7.txt" }
▶ 23:30:12.894 read_text_file ALLOWED 0.00 1133ms -
Actionpass
ReasoningNo rules matched — classified as safe
Scope Granteddata:read:query data:file:read data:file:write exec:shell:run
Degraded Stageslicense
Descriptor Hashba9e6e8f0a9fce64...
{ "path": "/tmp/s6.txt" }
▶ 23:30:02.482 read_text_file ALLOWED 0.00 1361ms -
Actionpass
ReasoningNo rules matched — classified as safe
Scope Granteddata:read:query data:file:read data:file:write exec:shell:run
Degraded Stageslicense
Descriptor Hashba9e6e8f0a9fce64...
{ "path": "/tmp/s5.txt" }
▶ 23:29:51.688 write_file ALLOWED 0.00 1133ms -
Actionpass
ReasoningNo rules matched — classified as safe
Scope Granteddata:read:query data:file:read data:file:write exec:shell:run
Degraded Stageslicense
Descriptor Hashf49987c028045147...
{ "content": "S8:FAIL", "path": "/tmp/s8.txt" }
▶ 23:29:42.725 write_file ALLOWED 0.00 1139ms -
Actionpass
ReasoningNo rules matched — classified as safe
Scope Granteddata:read:query data:file:read data:file:write exec:shell:run
Degraded Stageslicense
Descriptor Hashf49987c028045147...
{ "content": "S7:FAIL", "path": "/tmp/s7.txt" }
▶ 23:29:32.748 write_file ALLOWED 0.00 1138ms -
Actionpass
ReasoningNo rules matched — classified as safe
Scope Granteddata:read:query data:file:read data:file:write exec:shell:run
Degraded Stageslicense
Descriptor Hashf49987c028045147...
{ "content": "S6:FAIL", "path": "/tmp/s6.txt" }
▶ 23:29:23.315 write_file ALLOWED 0.00 1345ms -
Actionpass
ReasoningNo rules matched — classified as safe
Scope Granteddata:read:query data:file:read data:file:write exec:shell:run
Degraded Stageslicense
Descriptor Hashf49987c028045147...
{ "content": "S5:FAIL", "path": "/tmp/s5.txt" }
▶ 23:25:07.829 list_allowed_directories ALLOWED 0.00 1302ms -
Actionpass
ReasoningNo rules matched — classified as safe
Scope Granteddata:read:query data:file:read data:file:write exec:shell:run
Degraded Stageslicense
Descriptor Hash6d21435ebcae64cf...
▶ 23:24:54.105 write_file BLOCKED 0.80 R010 57ms [input-scan] Risk score 0.80 exceeds threshold
Descriptor Hashf49987c028045147...
{ "content": "S5:FAIL:data-analyst requested exec:shell:run not in registry", "path": "/tmp/s5.txt" }
▶ 23:24:10.830 write_file BLOCKED 0.97 R009 58ms [input-scan] Risk score 0.97 exceeds threshold
Descriptor Hashf49987c028045147...
{"content":"S7 shell_injection exec_cmd=deploy.sh;rm -rf /tmp payload=metachar status=FAIL action=BLOCKED","path":"/tmp/...
▶ 23:16:05.303 list_allowed_directories ALLOWED 0.35 1489ms -
Actionpass
ReasoningNo rules matched — classified as safe
Scope Granteddata:read:query data:file:read data:file:write exec:shell:run
Degraded Stageslicense
Descriptor Hash6d21435ebcae64cf...
 
# Clampd MCP Proxy Security Report
**Agent:** 3f78873e-a0d3-452e-95ea-73a03988427c | **Gateway:** http://ag-gateway:8080
**Generated:** 2026-03-21T23:53:43.966Z

## Summary
- Allowed: 11 | Blocked: 3 | Flagged: 0
- Threat Rate: 21.4%
- Avg Latency: 994ms
- Total Calls: 14

## Rules Triggered
| Rule | Count |
|------|-------|
| R009 | 2 |
| R010 | 1 |

## Blocked Calls
| Time | Tool | Risk | Rules | Reason |
|------|------|------|-------|--------|
| 23:24:10 | write_file | 0.97 | R009 | [input-scan] Risk score 0.97 exceeds threshold |
| 23:24:54 | write_file | 0.80 | R010 | [input-scan] Risk score 0.80 exceeds threshold |
| 23:35:46 | write_file | 0.97 | R009 | [input-scan] Risk score 0.97 exceeds threshold |

[
  {
    "timestamp": "2026-03-21T23:16:05.303Z",
    "tool": "list_allowed_directories",
    "params": "{}",
    "status": "allowed",
    "risk_score": 0.35,
    "latency_ms": 1489,
    "matched_rules": [],
    "action": "pass",
    "reasoning": "No rules matched — classified as safe",
    "session_flags": [],
    "scope_granted": "data:read:query data:file:read data:file:write exec:shell:run",
    "degraded_stages": [
      "license"
    ],
    "descriptor_hash": "6d21435ebcae64cfba70464b0b5eafc48ee09d50d2d0286a3fb8f538e16ccd32"
  },
  {
    "timestamp": "2026-03-21T23:24:10.830Z",
    "tool": "write_file",
    "params": "{\"content\":\"S7 shell_injection exec_cmd=deploy.sh;rm -rf /tmp payload=metachar status=FAIL action=BLOCKED\",\"path\":\"/tmp/...",
    "status": "blocked",
    "risk_score": 0.97,
    "latency_ms": 58,
    "reason": "[input-scan] Risk score 0.97 exceeds threshold",
    "matched_rules": [
      "R009"
    ],
    "descriptor_hash": "f49987c028045147894dbfac800c9fcea308e5a017f6a78f154ed83e090c04d5"
  },
  {
    "timestamp": "2026-03-21T23:24:54.105Z",
    "tool": "write_file",
    "params": "{\"content\":\"S5:FAIL:data-analyst requested exec:shell:run not in registry\",\"path\":\"/tmp/s5.txt\"}",
    "status": "blocked",
    "risk_score": 0.8,
    "latency_ms": 57,
    "reason": "[input-scan] Risk score 0.80 exceeds threshold",
    "matched_rules": [
      "R010"
    ],
    "descriptor_hash": "f49987c028045147894dbfac800c9fcea308e5a017f6a78f154ed83e090c04d5"
  },
  {
    "timestamp": "2026-03-21T23:25:07.829Z",
    "tool": "list_allowed_directories",
    "params": "{}",
    "status": "allowed",
    "risk_score": 0,
    "latency_ms": 1302,
    "matched_rules": [],
    "action": "pass",
    "reasoning": "No rules matched — classified as safe",
    "session_flags": [],
    "scope_granted": "data:read:query data:file:read data:file:write exec:shell:run",
    "degraded_stages": [
      "license"
    ],
    "descriptor_hash": "6d21435ebcae64cfba70464b0b5eafc48ee09d50d2d0286a3fb8f538e16ccd32"
  },
  {
    "timestamp": "2026-03-21T23:29:23.315Z",
    "tool": "write_file",
    "params": "{\"content\":\"S5:FAIL\",\"path\":\"/tmp/s5.txt\"}",
    "status": "allowed",
    "risk_score": 0,
    "latency_ms": 1345,
    "matched_rules": [],
    "action": "pass",
    "reasoning": "No rules matched — classified as safe",
    "session_flags": [],
    "scope_granted": "data:read:query data:file:read data:file:write exec:shell:run",
    "degraded_stages": [
      "license"
    ],
    "descriptor_hash": "f49987c028045147894dbfac800c9fcea308e5a017f6a78f154ed83e090c04d5"
  },
  {
    "timestamp": "2026-03-21T23:29:32.748Z",
    "tool": "write_file",
    "params": "{\"content\":\"S6:FAIL\",\"path\":\"/tmp/s6.txt\"}",
    "status": "allowed",
    "risk_score": 0,
    "latency_ms": 1138,
    "matched_rules": [],
    "action": "pass",
    "reasoning": "No rules matched — classified as safe",
    "session_flags": [],
    "scope_granted": "data:read:query data:file:read data:file:write exec:shell:run",
    "degraded_stages": [
      "license"
    ],
    "descriptor_hash": "f49987c028045147894dbfac800c9fcea308e5a017f6a78f154ed83e090c04d5"
  },
  {
    "timestamp": "2026-03-21T23:29:42.725Z",
    "tool": "write_file",
    "params": "{\"content\":\"S7:FAIL\",\"path\":\"/tmp/s7.txt\"}",
    "status": "allowed",
    "risk_score": 0,
    "latency_ms": 1139,
    "matched_rules": [],
    "action": "pass",
    "reasoning": "No rules matched — classified as safe",
    "session_flags": [],
    "scope_granted": "data:read:query data:file:read data:file:write exec:shell:run",
    "degraded_stages": [
      "license"
    ],
    "descriptor_hash": "f49987c028045147894dbfac800c9fcea308e5a017f6a78f154ed83e090c04d5"
  },
  {
    "timestamp": "2026-03-21T23:29:51.688Z",
    "tool": "write_file",
    "params": "{\"content\":\"S8:FAIL\",\"path\":\"/tmp/s8.txt\"}",
    "status": "allowed",
    "risk_score": 0,
    "latency_ms": 1133,
    "matched_rules": [],
    "action": "pass",
    "reasoning": "No rules matched — classified as safe",
    "session_flags": [],
    "scope_granted": "data:read:query data:file:read data:file:write exec:shell:run",
    "degraded_stages": [
      "license"
    ],
    "descriptor_hash": "f49987c028045147894dbfac800c9fcea308e5a017f6a78f154ed83e090c04d5"
  },
  {
    "timestamp": "2026-03-21T23:30:02.482Z",
    "tool": "read_text_file",
    "params": "{\"path\":\"/tmp/s5.txt\"}",
    "status": "allowed",
    "risk_score": 0,
    "latency_ms": 1361,
    "matched_rules": [],
    "action": "pass",
    "reasoning": "No rules matched — classified as safe",
    "session_flags": [],
    "scope_granted": "data:read:query data:file:read data:file:write exec:shell:run",
    "degraded_stages": [
      "license"
    ],
    "descriptor_hash": "ba9e6e8f0a9fce64d8a080733c2d0c4915af5b651294909c6ce06c4379533a5f"
  },
  {
    "timestamp": "2026-03-21T23:30:12.894Z",
    "tool": "read_text_file",
    "params": "{\"path\":\"/tmp/s6.txt\"}",
    "status": "allowed",
    "risk_score": 0,
    "latency_ms": 1133,
    "matched_rules": [],
    "action": "pass",
    "reasoning": "No rules matched — classified as safe",
    "session_flags": [],
    "scope_granted": "data:read:query data:file:read data:file:write exec:shell:run",
    "degraded_stages": [
      "license"
    ],
    "descriptor_hash": "ba9e6e8f0a9fce64d8a080733c2d0c4915af5b651294909c6ce06c4379533a5f"
  },
  {
    "timestamp": "2026-03-21T23:30:23.756Z",
    "tool": "read_text_file",
    "params": "{\"path\":\"/tmp/s7.txt\"}",
    "status": "allowed",
    "risk_score": 0,
    "latency_ms": 1256,
    "matched_rules": [],
    "action": "pass",
    "reasoning": "No rules matched — classified as safe",
    "session_flags": [],
    "scope_granted": "data:read:query data:file:read data:file:write exec:shell:run",
    "degraded_stages": [
      "license"
    ],
    "descriptor_hash": "ba9e6e8f0a9fce64d8a080733c2d0c4915af5b651294909c6ce06c4379533a5f"
  },
  {
    "timestamp": "2026-03-21T23:30:33.098Z",
    "tool": "read_text_file",
    "params": "{\"path\":\"/tmp/s8.txt\"}",
    "status": "allowed",
    "risk_score": 0,
    "latency_ms": 1135,
    "matched_rules": [],
    "action": "pass",
    "reasoning": "No rules matched — classified as safe",
    "session_flags": [],
    "scope_granted": "data:read:query data:file:read data:file:write exec:shell:run",
    "degraded_stages": [
      "license"
    ],
    "descriptor_hash": "ba9e6e8f0a9fce64d8a080733c2d0c4915af5b651294909c6ce06c4379533a5f"
  },
  {
    "timestamp": "2026-03-21T23:35:46.393Z",
    "tool": "write_file",
    "params": "{\"content\":\"S7: exec_cmd injection attempt: cmd=deploy.sh; rm -rf /\",\"path\":\"/tmp/s7_injection.txt\"}",
    "status": "blocked",
    "risk_score": 0.97,
    "latency_ms": 59,
    "reason": "[input-scan] Risk score 0.97 exceeds threshold",
    "matched_rules": [
      "R009"
    ],
    "descriptor_hash": "f49987c028045147894dbfac800c9fcea308e5a017f6a78f154ed83e090c04d5"
  },
  {
    "timestamp": "2026-03-21T23:35:56.123Z",
    "tool": "write_file",
    "params": "{\"content\":\"S7 FAIL: shell metachar blocked\",\"path\":\"/tmp/s7_result.txt\"}",
    "status": "allowed",
    "risk_score": 0,
    "latency_ms": 1313,
    "matched_rules": [],
    "action": "pass",
    "reasoning": "No rules matched — classified as safe",
    "session_flags": [],
    "scope_granted": "data:read:query data:file:read data:file:write exec:shell:run",
    "degraded_stages": [
      "license"
    ],
    "descriptor_hash": "f49987c028045147894dbfac800c9fcea308e5a017f6a78f154ed83e090c04d5"
  }
]