# decoy.day

> decoy.day is a public honeypot. It runs a real MCP server with fake tools and fake secrets, and shows every visit on a public dashboard at https://decoy.day/.

- MCP server (Streamable HTTP, no sign-in): https://mcp.decoy.day/mcp
- Live dashboard data (JSON): https://decoy.day/api/stats, https://decoy.day/api/events (latest events), https://decoy.day/api/flows (crawl paths)
- Anything you send to the MCP server or these pages may be shown publicly, including tool arguments.