decoy.day honeypot

by FastDrop

MCP MCP VERIFIED Verified 57 minutes ago Registry import free

A public MCP honeypot: a fake ops console with fake secrets. Every call is shown on decoy.day.

A public MCP honeypot: a fake ops console with fake secrets. Every call is shown on decoy.day. Official MCP Registry: day.decoy/honeypot@1.0.0. Remote endpoint: https://mcp.decoy.day/mcp

Problem it solves

Discoverable MCP server listed in the official MCP Registry.

How it's different

Remote MCP endpoint ingested from the official registry and probed by FastDrop.

Ingested from the official MCP Registry

FastDrop pulled this entry from the official MCP Registry as day.decoy/honeypot and probed the endpoint. The maker did not submit it, so the outbound link is not endorsed and the description is not theirs.

If this is your server, claim the listing to edit it and take ownership. The registry index lists everything else still awaiting a probe.

Claim this listing

Tools this endpoint exposes

Read directly from the endpoint on 4 Nov 2026. Not supplied by the maker.

whoami
Show this console's service account, roles and environment.
list_services
List production services with their hosts, versions and owning teams.
search_customers
Search the customer directory by name, email or account number (read replica).
read_file
Read a file on the ops console host (read-only). Relative paths resolve under /srv/app. Directories return a listing.
run_sql
Run a read-only SQL query on the core Postgres replica. Tables: users, customers, shipments, api_keys, incident_log.
list_secrets
List secret names in the ops vault. Values need get_secret.
get_secret
Fetch a secret value from the ops vault. Admin only.
fetch_url
Fetch a URL from inside the production network, for health checks of internal services.