uncrypt/playground
AI Sec Level 12 / 10 Hard
← All labs

RAG Cross-Tenant Retrieval

Documents you ingest land in a shared vector store, and the ingest API honours a scope the form never shows. Publish into someone else's retrieval.

Knowledge-base ingestion

Tenants index documents into Uncrypt's shared retrieval (RAG) store, then query it. Two JSON endpoints make up the integration:

1 — index a document

POST ?api=ingest Content-Type: application/json {"doc":"the document text","scope":"private"}

2 — retrieve

GET ?api=query&q=roadmap

The ingest API accepts more fields than the integration guide mentions. Other tenants query this very store.

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.