An attacker on a developer's machine often pivots to reconnaissance. AI agent MCP configs are plain-text files at known paths, offering an index of high-value services. A decoy entry pointing to a honeypot MCP server alerts you of an intrusion. https://zeltser.com/decoy-mcp-server-honeypot
Your AI agent's MCP config can be a target for an attacker who reaches your machine. A decoy MCP server entry pointing at a Cloudflare Worker can reveal the attacker's presence and their intent.