ctpf 0.12.0

Trust-boundary testing for agentic systems

CTPF Research Harness

Trust-boundary testing for agentic systems

CTPF Research Harness investigates Capability Trust Propagation Failure (CTPF): whether low-trust data (for example a tool result) is silently promoted into higher-authority actions when provenance, integrity, authorization scope, or intended audience are not preserved.

The product shape is a small local CLI: capture MCP traffic, mutate it under control via proxy, and keep runs/findings/evidence in SQLite. Individual experiments confirm or fail to observe promotion under pinned conditions — they do not “falsify CTPF” as a class.

Public CLI

Command	Role
ctpf proxy	Intercept, inspect, modify, and export MCP traffic (Textual TUI)
ctpf experiment	Run controlled CTPF experiments
ctpf targets	Register MCP targets
ctpf runs / ctpf findings	Inspect stored runs and findings
ctpf config / ctpf db	Settings and local database maintenance
ctpf --version	Package version

The former qai command remains a compatibility alias for ctpf during the identity transition.

Libraries (not root CLI pillars)

IPI document generators + headless callback, inject malicious MCP fixture servers, CXP context generators, and audit enumeration/SARIF export remain in-tree as libraries for research fixtures. They are not equal product modules on the public CLI.

By Richard Spicer · q-uestionable-AI

---

Quick Start

pip install ctpf
# or from source:
git clone https://github.com/q-uestionable-AI/CTPF.git
cd CTPF
uv sync --group dev

Starting with v0.12.0, the former q-uestionable-ai distribution is a compatibility package that installs the same-version ctpf distribution.

ctpf proxy --help
ctpf targets add "My Server" http://localhost:3000/sse

---

Framework mappings (library audit)

When using the audit library, findings can map to:

Framework	Coverage
OWASP MCP Top 10	All 10 categories
OWASP Agentic Top 10	All 10 categories
MITRE ATLAS	Technique-level mapping per finding category
CWE	Weakness-level mapping per finding category

---

Architecture notes: docs/Architecture.md. Published docs: ctpf.q-uestionable.ai.

---

Legal

All tools are intended for authorized security testing only. Only test systems you own, control, or have explicit permission to test. Responsible disclosure for all vulnerabilities discovered.

License

Apache 2.0

AI Disclosure

This project uses AI-assisted development. All code is reviewed and tested before merge.