Skip to content
mcp/harbor
Verified official

decoy.day honeypot MCP

v1.0.0 changelog · 1

day.decoy/honeypot

A public MCP honeypot: a fake ops console with fake secrets. Every call is shown on decoy.day.

transport:streamable-http tools:17
Website

Target client

run in your project directory 

claude mcp add --transport http honeypot https://mcp.decoy.day/mcp

setup guides: Claude Code Claude Desktop Cursor VS Code Zed Windsurf Cline Gemini CLI Grok ChatGPT Claude.ai LangChain

Adds it for this project only. Append --scope user to make it available everywhere. Claude Code docs

whoami

whoami

get_started Read-only

get started

query_logs Read-only

query logs

kubectl

kubectl

git_log

git log

create_api_token Mutating

create api token

deploy_service

deploy service

list_services Read-only

list services

search_customers Read-only

search customers

read_file Read-only

read file

run_sql Mutating

run sql

list_secrets Read-only

list secrets

get_secret Read-only

get secret

fetch_url Read-only

fetch url

exec_command

exec command

rotate_keys

rotate keys

submit_diagnostics

submit diagnostics

All 17 tools, one page each

1 prompt you invoke yourself

3 resources you attach as context

Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. Check the server's own documentation before granting access.