Decoy
Organization@decoy-run
Security infrastructure for the agent era. Open source tools to scan, trap, and red team AI agents.
5
Published Tools
8
Total Stars
677
Weekly Downloads
2
GitHub Followers
3
Public Repos
100/100
Avg Security
Published Tools
3 MCP Servers2 Agentsacross 2 categoriesad30jone
Security scanner for MCP server configurations. Finds risky tools, vulnerable packages, and suspicious servers across Claude Desktop, Cursor, VS Code, and more.
...moredecoy-run
Autonomous red team for MCP servers. Sends adversarial payloads to your tools, proves exploitation, reports what's broken. 53 attack patterns across 6 categories. Zero dependencies. npx decoy-redteam
...moredecoy-run
Security scanner for MCP server configurations. Like npm audit, but for your AI agent tool servers. Finds risky tools, input validation gaps, transport vulnerabilities, and over-permissioned capability chains. Open source, zero dependencies.
...moread30jone
Security tripwires for AI agents. Detect prompt injection attacks on your MCP tools.
ad30jone
Security tripwires and local MCP proxy for AI agents. Detect prompt injection and enforce tool-call policy.