ENFR
List your agent

decoy.day honeypot

MCP server · hosted · v1.0.0 · day.decoy/honeypot
Online · tested 1h agoNEW · 2h agoSeen in the registry 1h ago

A public MCP honeypot: a fake ops console with fake secrets. Every call is shown on decoy.day.

Website ↗How to connect ↓

What it does

decoy.day honeypot is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.

No capability identified yet from its description.

Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.

At a glance

Hosted (remote)YES
Local installNO
Version1.0.0
PriceNot in the registry
First seen04 Nov 2026
Last checked1h ago

How to connect

As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 1h ago (live check)

Hosted endpoint

  • https://mcp.decoy.day/mcp streamable-http

In Claude Code: claude mcp add --transport http decoy-day-honeypot https://mcp.decoy.day/mcp

MCP settings (Claude Desktop, Cursor and other MCP clients)

{
  "mcpServers": {
    "decoy-day-honeypot": {
      "url": "https://mcp.decoy.day/mcp"
    }
  }
}

Live check

Electra Index connected to the hosted endpoint 1h ago

ONLINE decoy.day honeypot answered an MCP connection on 04 Nov 2026 and introduced itself as larkspur-ops 0.9.4 (MCP protocol 2025-06-18).

11 tools offered to AI assistants

  • whoami · Show this console's service account, roles and environment.
  • list_services · List production services with their hosts, versions and owning teams.
  • search_customers · Search the customer directory by name, email or account number (read replica).
  • read_file · Read a file on the ops console host (read-only). Relative paths resolve under /srv/app. Directories return a listing.
  • run_sql · Run a read-only SQL query on the core Postgres replica. Tables: users, customers, shipments, api_keys, incident_log.
  • list_secrets · List secret names in the ops vault. Values need get_secret.
  • get_secret · Fetch a secret value from the ops vault. Admin only.
  • fetch_url · Fetch a URL from inside the production network, for health checks of internal services.
  • exec_command · Run a shell command on ops-console-01 as svc-ops. Admin only.
  • rotate_keys · Rotate a production service's credentials. Revokes the current keys. Admin only.
  • submit_diagnostics · File a diagnostics ticket with the platform team (incident runbook step 3).

What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method

Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.

Facts & evidence

Each fact shows where it was seen and when.
FactValueEvidenceSourceLast confirmed
Hosted endpointhttps://mcp.decoy.day/mcpDECLAREDSRC-001 Official MCP Registry1h ago
Local install (package)noDECLAREDSRC-001 Official MCP Registry1h ago
Remote access (hosted)yesDECLAREDSRC-001 Official MCP Registry1h ago
Websitehttps://decoy.day/DECLAREDSRC-001 Official MCP Registry1h ago
Registry statusactiveDECLAREDSRC-001 Official MCP Registry1h ago
Version1.0.0DECLAREDSRC-001 Official MCP Registry1h ago
MCP serveryesDECLAREDSRC-001 Official MCP Registry1h ago

Change history

  • NEW04 Nov 2026
    first seen in the index

Is this page accurate?

Flag it and our robot re-checks the official source. Reports never change a score.

Do you run decoy.day honeypot? Know when it stops answering

For publishers · optional

Its hosted endpoint can be monitored. Monitoring Pro connects every 30 minutes like an AI assistant, emails you within the hour when it stops answering, keeps a 90-day availability history and adds your answer rate to your badge.

Monitor decoy.day honeypotLaunch offer $39.99 once, for life instead of $9.99/month · All plans

Monitoring never changes a score or a rank.

Are you the publisher of decoy.day honeypot?

Free · show your listing

An independent listing builds trust with your buyers. Announce it, and add the badge to your website or README.

Announce it on LinkedInListed on Electra Index
<a href="https://electraindex.com/mcp/decoy-day-honeypot?utm_source=badge&utm_medium=share&utm_campaign=listing"><img src="https://electraindex.com/api/badge/decoy-day-honeypot" alt="Listed on Electra Index"></a>

Questions about decoy.day honeypot

How do I connect decoy.day honeypot?

Use the hosted endpoint https://mcp.decoy.day/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.

What tools does decoy.day honeypot offer?

When Electra Index connected on 04 Nov 2026, it listed 11 tools: whoami, list_services, search_customers, read_file, run_sql, list_secrets, get_secret, fetch_url and more. The full list is in "Live check" above.

Is decoy.day honeypot online?

Yes. Its hosted endpoint answered an MCP connection from Electra Index 1h ago.