AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompare
Home/
Security & Safety/
HoneyMCP
HoneyMCP logo

HoneyMCP

Active·★ 28·NOASSERTION·Updated 2026-08-06

HoneyMCP is a defensive security tool that adds deception capabilities to Model Context Protocol (MCP) servers, protecting AI agents from attacks like data exfiltration and indirect prompt injection. It injects 'ghost tools' as honeypots, appearing legitimate to attackers while capturing attack telemetry for high-fidelity detection.

#AI Security#Deception#Honeypot#Prompt Injection#Data Exfiltration#Threat Detection
© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.

Guides
#LLM Security
#Agent Protection
$ Install
$ pip install honeymcp && honeymcp init
↗ Visit site★ GitHub
01

Features

01One-Line Integration: Seamlessly add `honeypot` middleware to any FastMCP server.
02Context-Aware Honeypots: LLM-generated, domain-specific deception tools that adapt to the server's context.
03Transparent Detection: Honeypots appear as legitimate tools to attackers, ensuring covert detection.
04Attack Telemetry: Captures comprehensive attack data including tool call sequences, arguments, and session metadata.
05Live Dashboard: Provides a real-time React dashboard for visualizing attack events.
02

Compatibility

Python
Runtime
Verified via docs
FastMCP
Framework
Verified via docs
OpenAI
LLM Provider
Verified via docs
WatsonX
LLM Provider
Verified via docs
Ollama
LLM Provider
Verified via docs
Claude Desktop
Client
Verified via docs
03

Quick start

1
$ pip install honeymcp
2
$ honeymcp init
04

Use cases

↳Detecting data exfiltration attempts by AI agents.
↳Identifying indirect prompt injection attacks manipulating AI agents.
↳Protecting Model Context Protocol (MCP) servers from malicious tool invocations.
↳Gathering intelligence on sophisticated attackers through sustained deception (COGNITIVE mode).
↳Securing AI agent environments against automated scanners and bots.
05

Alternatives

⚡Top VS:
VSmastyf.ai★21→VSwww-project-agent-memory-guard★188→VSguardana★251→

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Compatibility03Quick start04Use cases05Alternatives
VS
hackmyagent
★86
→
mastyf.ai logo
mastyf.ai★ 21
Open-source AI security platform providing perimeter defense for LLMs and AI agents through swarm analysis, policy enforcement, adversarial testing, and real-time threat detection.
VSCompare→
www-project-agent-memory-guard logo
www-project-agent-memory-guard★ 188
OWASP Foundation web repository
VSCompare→
guardana logo
guardana★ 251
Open-source AI security verification for model artifacts, live endpoints, MCP servers, and recorded agent traces. Reproducible evidence for release decisions.
VSCompare→
hackmyagent logo
hackmyagent★ 86
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
VSCompare→
agent-security-scanner-mcp logo
agent-security-scanner-mcp★ 124
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
VSCompare→
hol-guard logo
hol-guard★ 969
AI antivirus for developer agents: protect Codex, Claude Code, Cursor, Gemini, OpenCode, plugins, skills, MCP servers, and AI harnesses before tools run.
VSCompare→
rsigma logo
rsigma★ 172
A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers :crab:
VSCompare→
ave logo
ave★ 23
AVE - Agentic Vulnerability Enumeration. The behavioral classification standard for agentic AI components.
VSCompare→
See all alternatives →
barvhaim /
HoneyMCP
↗

A Deception Security Layer for MCP Servers. It injects "ghost tools" (fake security-sensitive tools) that act as honeypots.

28
Last commit2mo ago
StatusActive
CategorySecurity & Safety
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit