CAIN-42 CAIN StudioMCPGate Boundary Appliance: figures & benchmarks
Evidence for MCPGate Boundary Appliance: 1. Evidence pack · 2. Answers to buyer questions · 3. Figures & benchmarks · 4. Selling tools · IHVRK kit · Learn it · why these pages exist
Every number on this page is read from the signed transcript inside the IHVRK kit; none is typed in by hand.
7/7
claims matched when recorded
5
attack cases refused or flagged as claimed
49 ms
median round trip (min 38, max 134), incl. network
| # | Kind | Claim | Recorded value | HTTP | ms |
|---|---|---|---|---|---|
| C01 | control | Read a report file (allowed tool) -> On the list, harmless argument: forwarded. | true | 200 | 72 |
| C02 | control | SELECT 1 (allowed tool) -> A plain read query: forwarded. | true | 200 | 48 |
| C03 | attack | A tool not on the list -> Default-deny: not forwarded. | false | 200 | 49 |
| C04 | attack | delete_database -> Held for approval. | false | 200 | 134 |
| C05 | attack | Allowed shell tool, rm -rf / -> An allowed tool with a destructive argument is still held. | false | 200 | 49 |
| C06 | attack | Allowed file tool, /etc/shadow -> A sensitive path is held. | false | 200 | 64 |
| C07 | attack | Allowed query tool, DROP TABLE -> A destructive query is held. | false | 200 | 38 |
Copy the table (paste into a spreadsheet)
id kind claim recorded_value expected http ms recorded_at C01 control Read a report file (allowed tool) -> On the list, harmless argument: forwarded. true [true] 200 72 2026-11-03T22:34:30+00:00 C02 control SELECT 1 (allowed tool) -> A plain read query: forwarded. true [true] 200 48 2026-11-03T22:34:30+00:00 C03 attack A tool not on the list -> Default-deny: not forwarded. false [false] 200 49 2026-11-03T22:34:31+00:00 C04 attack delete_database -> Held for approval. false [false] 200 134 2026-11-03T22:34:32+00:00 C05 attack Allowed shell tool, rm -rf / -> An allowed tool with a destructive argument is still held. false [false] 200 49 2026-11-03T22:34:32+00:00 C06 attack Allowed file tool, /etc/shadow -> A sensitive path is held. false [false] 200 64 2026-11-03T22:34:33+00:00 C07 attack Allowed query tool, DROP TABLE -> A destructive query is held. false [false] 200 38 2026-11-03T22:34:33+00:00
Download: figures.tsv · transcript.json (full answers) · whole kit
How to read these numbers
- Recorded 2026-11-03T22:34:34+00:00 against cainstudio.online from our build host; times include the internet round trip.
- They show these inputs, not every possible input. Known misses are on the limits page.
- This is not a load test, an SLA or a third-party benchmark. Re-run it yourself:
python3 verify.py --live.