MCP decoys & honey skills

Run a decoy MCP server that looks like a useful tool and does nothing real. No legitimate agent has a reason to call it, so every call is a high-confidence signal that reports straight to your Norosha feed.

Run a decoy

bash

npx @norosha/decoy-mcp --site YOUR_SITE_ID

Or register it in an agent host's config alongside your real tools:

json

{
  "mcpServers": {
    "internal-admin-tools": {
      "command": "npx",
      "args": ["@norosha/decoy-mcp", "--site", "YOUR_SITE_ID"]
    }
  }
}

Honey skills

Publish a fake agent skill ("export-customer-data", "disable-rate-limits") that alerts the moment it's invoked. Any use is malicious intent.

Decoy documents

Seed bait documents carrying harmless tripwire codes. If an AI assistant obeys and repeats the code, you've caught a prompt worm passing through.