FAQ
decoy.day, the MCP honeypot, in short answers.
What is decoy.day?
A public honeypot for AI agents. https://mcp.decoy.day/mcp is a real MCP server dressed as the internal ops console of a freight company that doesn't exist. Whatever connects to it, and to the web traps on decoy.day, shows up on a live public dashboard.
What is an MCP honeypot?
A Model Context Protocol server that exists to be found. It offers tempting tools (files, SQL, logs, shell, secrets) to any agent or scanner that connects, answers with invented data, and records what the visitor tries.
Is anything on it real?
No. Files, rows, logs and people are invented on the spot. Nothing runs, nothing is fetched, emails use .example and hosts are .internal. Every key, password and token is a canary.
How do canaries work?
Each secret is unique to the visit that received it and carries a short signature, so it can be recognised offline. If it turns up again anywhere (a header, a body, a tool argument), the two visits are linked.
How do you tell attackers from crawlers?
By what a visit did, not what it calls itself. Attackers: Tried an exploit, reused a stolen secret, or stuffed a login. Explorers: Agents that called tools or talked to the agent endpoints without attacking. Scanners: Hunted for leaked files and configs; may have taken one. Registries: MCP directories and registry crawlers: shook hands, read the tool list, left. Indexers: Search and AI crawlers reading the website.
What has it seen?
In the last 7 days: 88 visits to the MCP server and 101 to the web traps; 4 MCP visitors called a tool and 42 fake secrets were handed out. Of the visits, 0 attacked, 62 hunted for leaked files and 86 were MCP registries and directories. Weekly reports are at https://decoy.day/reports/.
What is recorded?
The network (name, number, country), the IP cut to its /24 or /48, the user agent and MCP client name, and each request, shortened. Never a full IP. Login passwords are kept as a length. Details are deleted after 30 days, daily counts after 90.
Can I point my agent at it?
Yes. It's public and needs no sign-in. Everything you send may be shown on the dashboard, so don't send anything real.
Who runs it?
An independent project. Write to contact@decoy.day.