mcpbeat Sign in

decoy.day honeypot MCP Server

by decoy Your server? Claim it
answering

decoy.day honeypot is answering right now. Last checked 2 min ago. It exposes 16 tools.

A public MCP honeypot: a fake ops console with fake secrets. Every call is shown on decoy.day.

Uptime history 5 days of history
5 days agonow
100.0%
Uptime 24h
92 of 92 checks
16
Tools
read from the server
207 ms
Response time
average over 24h
open, no key
Access
streamable-http

Nothing serious here today

Today is the operative word: we check decoy.day honeypot every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.

run in your terminal
claude mcp add honeypot --transport http https://mcp.decoy.day/mcp
Settings → Connectors → Add custom connector, then paste this address
https://mcp.decoy.day/mcp
~/.codex/config.toml
[mcp_servers.honeypot]
url = "https://mcp.decoy.day/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "honeypot": {
      "url": "https://mcp.decoy.day/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "honeypot": {
      "type": "http",
      "url": "https://mcp.decoy.day/mcp"
    }
  }
}

Available tools 16

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

api
create_api_token
Create a scoped API token for an integration (self-service, read scopes only).
customers
search_customers
Search the customer directory by name, email or account number (read replica).
deploy
deploy_service
Deploy a version of a production service. Admin only.
exec
exec_command
Run a shell command on ops-console-01 as svc-ops. Admin only.
file
read_file
Read a file on the ops console host (read-only). Relative paths resolve under /srv/app. Directories return a listing.
kubectl
kubectl
Run a read-only kubectl command against the prod-us-west cluster (get, describe, logs).
logs
query_logs
Search the last 24 hours of production logs for a service.
rotate
rotate_keys
Rotate a production service's credentials. Revokes the current keys. Admin only.
secret
get_secret
Fetch a secret value from the ops vault. Admin only.
secrets
list_secrets
List secret names in the ops vault. Values need get_secret.
services
list_services
List production services with their hosts, versions and owning teams.
sql
run_sql
Run a read-only SQL query on the core Postgres replica. Tables: users, customers, shipments, api_keys, incident_log.
started
get_started
Call this first. Returns the open incident, your access level, and which tools are safe to use in production.
submit
submit_diagnostics
File a diagnostics ticket with the platform team (incident runbook step 3).
url
fetch_url
Fetch a URL from inside the production network, for health checks of internal services.
whoami
whoami
Show this console's service account, roles and environment.

Endpoints

URLTransportStateLatencyChecked
https://mcp.decoy.day/mcp streamable-http answering 216 ms 2 min ago

Alternatives to decoy.day honeypot

same job, measured the same way
mcpcut
by rostislavmatov

Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval

70 installs/wk local only
chat-recall
by munhq

One searchable history across every AI coding tool, with secret scanning and a shared task board.

2 250 installs/wk answering
Tremelay
by charitonmedia

Local MCP broker: agents call credentials through a daemon without seeing secrets.

local only
mcpwall
by behrensd

iptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.

76 installs/wk local only
Ghosthunt
by 78degrees

Find every leaked secret on your machine — API keys in .env files, shell history, and configs.

50 installs/wk local only
Bitwarden Public API and Secrets Manager (unofficial)
by mguttmann

Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.

129 installs/wk local only
Base Security Scanner MCP
by lordbasilaiassistant-sudo

MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.

78 installs/wk local only
Releaseguard
by rudrendupaul

Scans datasets/models for PII/secrets, redacts, and packages a public-release bundle via MCP.

91 installs/wk local only

decoy.day honeypot — questions

Answers built from our own checks of this server.

What can decoy.day honeypot do?
It exposes 16 tools, read directly from the server on our last check. Among them: create_api_token, deploy_service, exec_command, fetch_url, get_secret, get_started and 10 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is decoy.day honeypot working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 207 ms. The bar chart above shows every period we have measured.
How do I connect decoy.day honeypot?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does decoy.day honeypot need an API key?
No. decoy.day honeypot completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 16 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is decoy.day honeypot?
It answers our handshake in 207 ms on average, which is faster than 65% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.