decoy.day honeypot MCP Tools

• whoami

  whoami

• get_started Read-only

  get started

• query_logs Read-only

  query logs

• kubectl

  kubectl

• git_log

  git log

• create_api_token Mutating

  create api token

• deploy_service

  deploy service

• list_services Read-only

  list services

• search_customers Read-only

  search customers

• read_file Read-only

  read file

• run_sql Mutating

  run sql

• list_secrets Read-only

  list secrets

• get_secret Read-only

  get secret

• fetch_url Read-only

  fetch url

• exec_command

  exec command

• rotate_keys

  rotate keys

• submit_diagnostics

  submit diagnostics

This list was read from the server itself, by connecting to it and calling tools/list on 14 November 2026. It is what the server actually exposes, not what its listing claims.

Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.