lurq

MCP server

Home

decoy.day honeypot

A public MCP honeypot: a fake ops console with fake secrets. Every call is shown on decoy.day.

Endpoint
Answering
Works in
20 of 21 clients
Tools
17
Last checked
Nov 11, 2026

Does decoy.day honeypot work in your MCP client?

Registry name day.decoy/honeypot, endpoint https://mcp.decoy.day/mcp.

  • Claude Codeworks
  • Claude Desktopworks
  • Claude.aiworks
  • Claude API MCP connectorworks
  • ChatGPTworks
  • OpenAI Responses APIworks
  • Codexworks
  • Gemini CLIworks
  • Cursorworks
  • VS Code (GitHub Copilot)works
  • Windsurf (Devin Desktop)works
  • Zedworks
  • JetBrains AI Assistantworks
  • Junieunknownno source confirms Junie supports Streamable HTTP
  • Clineworks
  • Continueworks
  • Gooseworks
  • Lovableworks
  • Replit Agentworks
  • Bolt.newworks
  • v0works

How clients sign in

No credentials: it answered lurq's probe without any.

Tools

whoamiget_startedquery_logskubectlgit_logcreate_api_tokendeploy_servicelist_servicessearch_customersread_filerun_sqllist_secretsget_secretfetch_urlexec_commandrotate_keyssubmit_diagnostics

Get the setup for your client from your agent

This page is a daily snapshot. lurq's connect_check answers for the client you are wiring this server into, with the exact steps and the config to paste in that client's own format, and lurq mcp-pin tells you when the server changes. One command connects Claude Code, Cursor, VS Code and other agents:

npx lurqrun

Free to start. How connect_check works

From lurq's credential-free probe of this server's endpoint on Nov 11, 2026, and each client's own documentation. This page refreshes every 168 hours. How the probe works, and how maintainers opt out.