Skip to main content

mockworld

A synthetic internet for agents

Run fake services — a fake Stripe, a fake Gmail, a fake exchange, a fake CRM — as local MCP servers, so you can build and test agents without touching production, leaking data, or paying for real API calls.

PyPI Python CI License

pip install mockworld-mcp
mockworld run mock:payments      # a stateful fake Stripe as an MCP server

Status: released — mockworld-mcp on PyPI. Deterministic engine, 6 built-in mocks, MCP stdio + HTTP, fault injection, control plane, registry, world composition, record-mode, snapshots, and a stampede Target. Companion to stampede.


Contents

Why

Agents need to do things — charge a card, send an email, place a trade, update a record — but you can't point a half-finished, non-deterministic agent at real Stripe/Gmail/an exchange during development. So teams hand-build throwaway mocks for every project, or test against nothing and find failures in production.

Recent agent sandboxes (Veris Sandbox, AWS ToolSimulator) put an LLM in the response path, so the mock does not behave the same way twice. That rules out a CI run that is green for the same reason twice, a byte-identical bug repro, and offline or air-gapped testing.

mockworld is deterministic, MCP-native, and open:

  • Deterministic & LLM-free. A seed determines state, IDs, timing, and every injected fault. reset --seed 42 produces the same decline across 50 parallel CI workers. No LLM in the response path.
  • MCP-native. Services are MCP servers with tool descriptions, stateful behavior, and business-logic fault semantics (declines, insufficient funds, rate limits, disputes). Postman and WireMock target human-driven HTTP testing; they don't speak MCP and don't model business state.
  • Open & self-hostable. pip install, runs locally, offline, Apache-2.0 — not a hosted SaaS.

Install

pip install mockworld-mcp

Requires Python 3.11+. The distribution is named mockworld-mcp; the import package and CLI are simply mockworld.

Quickstart

mockworld list                        # the built-in mocks
mockworld run mock:payments           # a stateful fake Stripe over stdio (MCP)
mockworld run mock:payments --transport http --port 8931   # Streamable HTTP + control plane
mockworld run mock:payments --seed 42 --faults hostile     # deterministic + adversarial
mockworld inspect mock:crm            # tools, faults, and state shape without running
mockworld demo mock:payments          # prove determinism: same seed → identical transcript

Point any MCP client (or a stampede swarm) at it. mockworld reset --seed 42 returns a running server to a byte-identical world, every time.

Use it in your tests

Installing mockworld gives every pytest run a mockworld fixture — a deterministic fake Stripe in two lines:

def test_agent_handles_a_decline(mockworld):
    pay = mockworld.start("mock:payments", seed=7, faults="hostile")
    cust = pay.call("create_customer", {"name": "Ada", "balance": 10_000}).data
    result = my_agent.charge(pay, cust["id"], 2_500)   # your agent, against a fake Stripe
    assert result.retried_sanely

Seeded and in-memory: each test is deterministic and isolated, and 50 parallel workers don't collide.

Built-in mocks

Mock Shape What it exercises
mock:payments Stripe charges, refunds, idempotency; refund ≤ captured, balance conservation
mock:crm Records the delete-vs-archive misuse map; audit log; optimistic locking
mock:exchange CEX balances, orders, fills, slippage; balance conservation
mock:email Gmail/SMTP send/read/search; sticky bounces; threading; rate limits
mock:files S3 read-after-write consistency; versioning; slow-download latency
mock:hello the smallest complete example, for learning the schema

Each enforces stateful invariants and injects seeded, business-shaped faults. A declarative mock.yaml plus an optional Python handler defines a mock.

Author & share mocks

mockworld new mystripe                # scaffold a runnable, clean-linting mock to grow from
mockworld validate ./mystripe         # schema, handler ABI, determinism smells, description quality
mockworld pack ./mystripe             # print a registry entry (checksum + metadata) to publish

mockworld search weather              # the public registry
mockworld add mock:weather            # install a community mock — checksum-verified + safety-gated

The registry (swarmproof/mockworld-registry) is an index-as-repo: contribute a mock by opening a PR with a folder and an index entry. See docs/AUTHORING.md and mock:hello.

Compose, record, and simulate

# Compose several mocks into one world with a shared customer namespace:
mockworld run world:examples/worlds/ecommerce.yaml --seed 42
#   → payments + crm + email share the same 50 customers: charge → update CRM → email, consistently.

# Scaffold a runnable mock from an OpenAPI spec — or from captured traffic (HAR):
mockworld record --openapi ./petstore.yaml --out ./petstore_mock
mockworld record --har ./session.har --name orders --out ./orders_mock

# Run a scripted-persona swarm → an Agent Readiness Report (the misuse map):
mockworld swarm mock:crm --agents 200 --goal hide --seed 42
#   ⚠ 32.5% of agents destroyed data they meant to hide (delete vs archive) — reproducible.
mockworld swarm mock:crm --agents 200 --seed 42 --descriptions ambiguous
#   ⚠ 45.5% — same swarm, vaguer tool descriptions.

# Save a dirtied world as a portable artifact; reload it anywhere to reproduce a bug:
mockworld snapshot save mock:payments bug123.mw.json --seed 7

# Govern fidelity drift against a real provider's OpenAPI contract:
mockworld verify mock:payments --against ./stripe-openapi.yaml

# Export target-side traces (OTel GenAI profile) to any OTLP collector:
mockworld run mock:payments --otlp http://localhost:4318

The joint chaos demo — a transport interruption and a business decline at once, with the side-effect firing exactly once — runs standalone:

python examples/demos/exactly_once_under_chaos.py

Project structure

mockworld/
├── src/mockworld/
│   ├── determinism.py       # the seeded entropy funnel (clock/ids/rng/fault-dice)
│   ├── state.py             # copy-on-write state store (memory / sqlite)
│   ├── session.py           # per-session isolation
│   ├── schema.py            # the mock.yaml pydantic models
│   ├── faults.py            # business-logic fault injector
│   ├── dispatch.py          # declarative CRUD + Python handler ABI
│   ├── engine.py            # the transport-free call path (start here)
│   ├── server.py            # MCP exposure: stdio + Streamable HTTP + resources
│   ├── control.py           # control plane + stampede Target protocol
│   ├── trace.py             # OTel-GenAI-profile spans + NDJSON + OTLP export
│   ├── registry.py          # add / search / pack (index-as-repo)
│   ├── world.py             # compose mocks with a shared identity namespace
│   ├── record.py            # scaffold a mock from OpenAPI / HAR
│   ├── snapshot.py          # portable scenario snapshots (+ migration)
│   ├── swarm.py             # persona swarm → Agent Readiness Report
│   ├── verify.py            # contract-drift check vs OpenAPI
│   ├── cli.py               # the mockworld command
│   └── mocks/               # payments · crm · exchange · email · files · hello
├── tests/                   # 86 tests mapping to the TEST-PLAN gates
├── docs/                    # ARCHITECTURE · PRD · AUTHORING · RELEASING · TEST-PLAN · …
├── examples/                # worlds/ · demos/ · registry/
└── .github/workflows/       # ci.yml · release.yml

The engine has no MCP dependency; server.py, control.py, and cli.py are adapters over it. This keeps the determinism and isolation tests dependency-free.

Documentation

Doc What it covers
docs/AUTHORING.md Write a mock: schema, handler ABI, faults, publishing
docs/ARCHITECTURE.md Engine design, session isolation, the stampede contract, ADRs
docs/PRD.md Requirements (the REQ-IDs referenced across the docs)
docs/TEST-PLAN.md Test strategy, E2E scenarios, and CI gates
docs/RELEASING.md How releases are cut and published to PyPI
CHANGELOG.md Release history
SPEC.md · ROADMAP.md The original spec and roadmap

Contributing

Contributions welcome — bug reports, new mocks, and features. See CONTRIBUTING.md. Three rules: determinism is required (all entropy comes from the seeded ctx; the validator enforces it), faults are business-logic only, and every mock ships a fidelity.md.

git clone https://github.com/swarmproof/mockworld && cd mockworld
uv venv && uv pip install -e ".[dev]"
python -m pytest -q

License

Apache-2.0. Citable via CITATION.cff.

Part of the Swarm Proof toolkit

mockworld is one of the Swarm Proof projects for building and testing reliable agents:

Project What it does
stampede Point a herd of realistic agents at your system before real ones arrive
mockworldyou are here A synthetic internet for agents — fake Stripe, Gmail, exchange, instantly
mcp-probe The CI quality suite for MCP servers — lint, contract-test, benchmark, load
costbomb Denial-of-wallet fuzzing — find the inputs that make your agent spend $500
exactly-once Idempotency middleware so agent side-effects fire once
agent-postmortems A structured incident database + post-mortem standard for agent failures
awesome-agent-reliability The curated map of the field

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

mockworld_mcp-0.2.3.tar.gz (139.5 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

mockworld_mcp-0.2.3-py3-none-any.whl (97.3 kB view details)

Uploaded Python 3

File details

Details for the file mockworld_mcp-0.2.3.tar.gz.

File metadata

  • Download URL: mockworld_mcp-0.2.3.tar.gz
  • Upload date:
  • Size: 139.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for mockworld_mcp-0.2.3.tar.gz
Algorithm Hash digest
SHA256 aae619de02deb618a89313c0a6b1a9c4d7eec1a5b6a44c4b4b4b9b2444e53870
MD5 3f4afdfae85cf8ba3e9cfa83e31cfbf0
BLAKE2b-256 1775bcc22beec79952af1ab983f342269a75ef21999e413d6c79462e70733aba

See more details on using hashes here.

Provenance

The following attestation bundles were made for mockworld_mcp-0.2.3.tar.gz:

Publisher: release.yml on swarmproof/mockworld

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file mockworld_mcp-0.2.3-py3-none-any.whl.

File metadata

  • Download URL: mockworld_mcp-0.2.3-py3-none-any.whl
  • Upload date:
  • Size: 97.3 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for mockworld_mcp-0.2.3-py3-none-any.whl
Algorithm Hash digest
SHA256 80ada5ff170ad4db2861fecf13a7ba01af1422dc0a2a1064c871b46198af09a2
MD5 c8d4a46518fee8277bd54e9e21cf5fb0
BLAKE2b-256 2babb2f292bf2d5dd0728b30e3b7e8818aaa2a430c39c498561da0acfd8ec79a

See more details on using hashes here.

Provenance

The following attestation bundles were made for mockworld_mcp-0.2.3-py3-none-any.whl:

Publisher: release.yml on swarmproof/mockworld

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

0.3.1

2 files

0.3.0

2 files

This release

0.2.3 This release

2 files

0.2.2

2 files

0.2.1

2 files

0.2.0

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page