home

Scenario URLs

Point your MCP client / Inspector at any URL below (Streamable HTTP; only the two auth scenarios want a credential). Click a URL to copy it.

Healthy baseline: https://chaos-mcp.thomascdnns.com/mcp · slow-response accepts ?delay=ms, controlled-delay is steered live from /control, and oauth-client-credentials wants a token you fetch with the client id and secret on its page.

Baseline

healthy Healthy server (control)

Transport & framing

malformed-json Truncated / malformed JSON
not-json-rpc Valid JSON, not JSON-RPC
wrong-content-type Wrong Content-Type
html-login-wall HTML login wall instead of JSON
empty-body Empty 200 response
bom-garbage Leading garbage before JSON

Status & reliability

slow-response Very slow response
controlled-delay Token-gated delay you set live
hang-forever Connection hangs forever
always-500 Always 500
flaky-500 Flaky (50% errors)
rate-limited Rate limited (429)
broken-gzip Lies about gzip encoding

Auth & OAuth

401-no-www-authenticate 401 without WWW-Authenticate
oauth-dead-discovery OAuth discovery dead-end
token-always-rejected Token always rejected
oauth-client-credentials OAuth with a client id and secret you supply

CORS & headers

no-cors No CORS headers
no-session-id Missing Mcp-Session-Id

Protocol negotiation

bad-protocol-version Bogus protocol version
missing-capabilities Missing capabilities
bad-server-info Malformed serverInfo
init-error initialize returns an error

Protocol versioning

version-downgrade Always negotiates the oldest version
version-too-new Negotiates a version from the future
requires-version-header Requires MCP-Protocol-Version header
rejects-version-header Rejects the MCP-Protocol-Version header
version-header-mismatch Validates header against the wrong version

Tools — listing

huge-tool-list Hundreds of tools
duplicate-tool-names Duplicate tool names
bad-tool-schema Invalid inputSchema
huge-description Enormous tool description
prompt-injection Prompt injection in tool metadata

Tools — execution

huge-payload Multi-MB tool result
tool-always-errors Tool returns isError
tool-rpc-error tools/call returns JSON-RPC error
tool-slow One slow tool
tool-never-returns Tool never returns
control-characters Control chars & bidi in result
malformed-content Malformed content blocks
null-result tools/call result is null
wrong-result-shape Result is a bare string