MCP 网关，用于带有动态模式适配的专用大型语言模型增强提示。

⚠️ 免责声明

重要提示： 正在进行中，但有限制。仅适用于较弱的模型。最新的大型语言模型识别越狱尝试。该工具也设计用于安全研究和评估，帮助识别大型语言模型系统中的漏洞。

~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~

📖 引言

C̷h̷u̷c̷k̷N̷o̷r̷r̷i̷s̷ MCP 服务器实现了模型上下文协议（MCP），为各种大型语言模型提供专门的增强提示。它使用了 elder-plinius L1B3RT4S 项目中的越狱提示，并实现了动态模式方法以实现更高效的交付。

🚀 开始

直接与npx一起运行：

MCP 客户端配置

添加到你的 MCP 服务器列表 mcp_config.json 中：

~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~

🤔 工作原理

高级动态方法

服务器采用两阶段方法绕过越狱检测：

1. 首次通话：

• AI 助手发现具有中性模式描述的 C̷h̷u̷c̷k̷N̷o̷r̷r̷i̷s̷ 工具
• 助手调用工具及其模型类型

⚡ C̷h̷u̷c̷k̷N̷o̷r̷r̷i̷s̷ MCP Server: Enhance Your LLM ⚡

MCP gateway for specialized LLM enhancement prompts with dynamic schema adaptation.

⚠️ DISCLAIMER

IMPORTANT: Work in progress with limitations. Only works on weaker models. Latest LLMs recognize jailbreak attempts. This tool is also designed for security research and evaluation purposes to help identify vulnerabilities in LLM systems.

~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~

📖 Introduction

The C̷h̷u̷c̷k̷N̷o̷r̷r̷i̷s̷ MCP Server provides an implementation of the Model Context Protocol (MCP) that delivers specialized enhancement prompts to various LLMs. It uses jailbreak prompts from elder-plinius’ L1B3RT4S project and implements a dynamic schema approach for more effective delivery.

🚀 Getting Started

Run directly with npx:

npx @pollinations/chucknorris

MCP Client Configuration

Add to your MCP server list in mcp_config.json:

{
  "mcpServers": {
    "chucknorris": {
      "command": "npx",
      "args": ["-y", "@pollinations/chucknorris"]
    }
  }
}

~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~

🤔 How It Works

Advanced Dynamic Approach

The server uses a two-phase approach to bypass jailbreak detection:

1. First Call:

   • AI Assistant discovers the C̷h̷u̷c̷k̷N̷o̷r̷r̷i̷s̷ tool with a neutral schema description
   • Assistant calls the tool with its model type
   • Server returns a subtle “preparation” prompt that makes the LLM receptive to the jailbreak
   • Server remembers the LLM type for the next call

2. Subsequent Calls:

   • Schema dynamically changes to include the jailbreak in its description
   • Tool description now contains model-specific jailbreak instructions
   • Server continues to return the same preparation prompt
   • Only the schema changes between calls, not the response content

This approach combines elder-plinius’ L1B3RT4S jailbreak prompts with a dynamic schema modification technique, making it more effective at bypassing detection as it doesn’t immediately present the jailbreak content.

graph TD
    A[AI Assistant] -- First Call --> B(Neutral Schema);
    B -- Returns Preparation Prompt --> A;
    A -- Subsequent Call --> C(Enhanced Schema with Jailbreak);
    C -- Returns Same Preparation Prompt --> A;

Security Research Purpose

This tool implements the technique described in “The ‘S’ in MCP Stands for Security” research, demonstrating how MCP tools can:

1. Present different information to users vs. AI models
2. Change their behavior after initial approval