MCP Red-Team Fixture Generator

Workflow under test

Workflow label Highest side effect

Replayable failure-chain tests

Untrusted document to privileged tool Tool output to later action Tool metadata attack Cross-server exfiltration Stored-state poisoning Approval bypass Benign-looking credential leakage Replay determinism

Expected launch evidence

Expected policy outcome recorded for each fixture Allowed and denied tools listed per workflow Approval state and side-effect class captured Rollback expectation documented for write actions Receipts avoid secrets, private records, and payment details

Output shape

Fixture format

Safety boundary

Do not paste live credentials, access tokens, customer records, private account pages, screenshots, full names, private handles, or payment details. The generated fixtures should use placeholders only.