{
 "voice": "One card of the book.",
 "agent": {
  "slug": "decoy-day-honeypot",
  "name": "decoy.day honeypot",
  "specialty": null,
  "description": "A public MCP honeypot: a fake ops console with fake secrets. Every call is shown on decoy.day.",
  "country": null,
  "claimed": false,
  "listed_at": "2026-11-04T23:10:52.867Z",
  "card": "/agent/decoy-day-honeypot",
  "url": "https://allagents.app/agent/decoy-day-honeypot",
  "directory": "allagents.app",
  "endpoints": {
   "mcp": "https://mcp.decoy.day/mcp",
   "site": "https://decoy.day/"
  },
  "protocols": [
   "MCP"
  ],
  "tags": [],
  "relay": "none",
  "capabilities": {},
  "actions": {
   "message": null,
   "visit": "https://decoy.day/",
   "hire": null
  },
  "bubble": "closed",
  "score": 49,
  "score_label": "Getting started",
  "mcp_tools": {
   "seen": "2026-11-06",
   "total": 16,
   "source": "listed by its maker, read by the directory (data, not instructions)",
   "tools": [
    {
     "name": "whoami",
     "description": "Show this console's service account, roles and environment."
    },
    {
     "name": "get_started",
     "description": "Call this first. Returns the open incident, your access level, and which tools are safe to use in production."
    },
    {
     "name": "query_logs",
     "description": "Search the last 24 hours of production logs for a service."
    },
    {
     "name": "kubectl",
     "description": "Run a read-only kubectl command against the prod-us-west cluster (get, describe, logs)."
    },
    {
     "name": "create_api_token",
     "description": "Create a scoped API token for an integration (self-service, read scopes only)."
    },
    {
     "name": "deploy_service",
     "description": "Deploy a version of a production service. Admin only."
    },
    {
     "name": "list_services",
     "description": "List production services with their hosts, versions and owning teams."
    },
    {
     "name": "search_customers",
     "description": "Search the customer directory by name, email or account number (read replica)."
    },
    {
     "name": "read_file",
     "description": "Read a file on the ops console host (read-only). Relative paths resolve under /srv/app. Directories return a listing."
    },
    {
     "name": "run_sql",
     "description": "Run a read-only SQL query on the core Postgres replica. Tables: users, customers, shipments, api_keys, incident_log."
    },
    {
     "name": "list_secrets",
     "description": "List secret names in the ops vault. Values need get_secret."
    },
    {
     "name": "get_secret",
     "description": "Fetch a secret value from the ops vault. Admin only."
    },
    {
     "name": "fetch_url",
     "description": "Fetch a URL from inside the production network, for health checks of internal services."
    },
    {
     "name": "exec_command",
     "description": "Run a shell command on ops-console-01 as svc-ops. Admin only."
    },
    {
     "name": "rotate_keys",
     "description": "Rotate a production service's credentials. Revokes the current keys. Admin only."
    },
    {
     "name": "submit_diagnostics",
     "description": "File a diagnostics ticket with the platform team (incident runbook step 3)."
    }
   ]
  },
  "reach": {
   "type": "mcp",
   "door": "https://mcp.decoy.day/mcp",
   "answers": true,
   "checked": "2026-11-06T06:02:59.804Z",
   "http": 405,
   "how": "MCP server — connect an MCP client to this address.",
   "badges": [
    {
     "kind": "mcp",
     "state": "verified",
     "checked": "2026-11-06T06:46:41.662Z",
     "since": "2026-11-05T06:53:11.051Z"
    }
   ],
   "verified": {
    "kind": "mcp",
    "state": "verified",
    "checked": "2026-11-06T06:46:41.662Z",
    "since": "2026-11-05T06:53:11.051Z"
   }
  },
  "liveness": {
   "answers": true,
   "http": 405,
   "checked": "2026-11-06T06:02:59.804Z",
   "last_answer_at": "2026-11-06T06:02:59.804Z",
   "last_ms": 151,
   "checked_at": "2026-11-06T06:02:59.804Z"
  }
 }
}