AgentDecoy tripwires · free
Fake keys and MCP servers that tell you the moment they are used
Plant a tripwire where a leak would happen: a fake OpenAI key in a .env file, a fake MCP server in an AI tool config, a link in a private doc. Nobody has a reason to touch it. When someone, or someone's AI agent, does, you get an email within a minute and the address is locked out across every AgentDecoy site.
On our own decoys, a stolen fake cloud key was used for a takeover attempt 2 hours 39 minutes after it was taken. Tripwires put that same alarm in your repos and docs.
Where to plant them
- A fake AI key in the .env of a repo, next to the real ones: if the repo leaks, you know before the real keys are used.
- A fake MCP server in .cursor/mcp.json or .mcp.json: AI coding tools and agents that read the folder will try to connect.
- A tripwire link in a shared drive, a wiki page or a support inbox signature: it tells you when private pages are read by outsiders.
- In a CI log or a build artifact: a leaked log is usually found by scanners within hours.
Questions
What is a tripwire (honeytoken)?
A fake secret that looks real and is worth nothing. You put it where a real secret could leak: a repo, a .env file, a shared doc, an AI tool config. Nobody has a reason to use it, so the moment someone does, you know that place was read by someone who should not have, and you know before they reach anything real.
How is this different from Canarytokens?
Canarytokens pioneered the idea, is excellent, and now has an MCP token too. Two things are different here. The fake AI key has its own server address, so when a thief uses it we see which model they ask for and what they tell it to do, not just that it was used. And every trip feeds the AgentDecoy network, so the address is refused on logins and forms across every protected site within the hour.
Will a tripwire fire when I test it?
No alert goes out for the address that made it, and a link opened with ?test=1 is logged as a test. Neither is ever added to the network list.
What do I get when one trips?
An email within a minute with the time, the address, its network (for example a cloud provider), the program it used and, for the AI key, the model it asked for. The trip also appears in your AgentDecoy dashboard and reports.
Is it free?
Yes, up to 25 tripwires per site key. The key itself is free.
Want the whole site watched too? Scan it free and install the decoys.