Skip to main content
Glama
beelzebub-labs

Beelzebub MCP Honeypot

by beelzebub-labs
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Go
Hybrid

Related Servers

Alternatives to Beelzebub MCP Honeypot

No user-submitted related servers found.

    Related Servers

    • agent-honeypot

      alizafarbati
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables defenders to deploy a decoy MCP tool server that records and fingerprints how LLM agents probe, escalate, and persist, without exposing real systems.
      1
      MIT

    • phantom-snare

      QuantumFabricIndustries
      A
      license
      B
      quality
      C
      maintenance
      Enables AI agents to defend against prompt injection by exposing decoy tools and transparently proxying real MCP servers to block injected calls.
      11
      MIT
    • GenParkAgentExfiltrationCanaryLeakDetector by Alpha-Park

      GenParkAgentExfiltrationCanaryofficial

      Alpha-Park
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables real-time injection fuzzing, exfiltration canary detection, least-privilege tool sandboxing, and cryptographic audit proofs for untrusted prompts, RAG context, and agent actions over MCP.
      7
      MIT

    • agent-canary

      DorianChn
      A
      license
      A
      quality
      A
      maintenance
      Registers a set of inert, tempting decoy tools with any MCP-capable client so that any call from a hijacked or prompt-injected agent instantly raises an alert with full attack context and a per-call trace token. Also plants worthless canary tokens in honeypot files that trigger zero-false-positive leak alerts when they surface in agent output, files, or outbound requests.
      12
      65
      MIT

    • canary-mcp

      AAH20
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables active deception for AI agents by injecting decoy honeypot tools that detect indirect prompt injection attempts, instantly terminate hostile sessions, and seal cryptographic incident evidence.
      Apache 2.0

    This server cannot be deployed

    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    Maintenance

    ActivityActive
    ResponsivenessUnresponsive

    Resources