THELEAF / THREAT OBSERVATORY
This is a honeypot. Interactions are recorded for security research. All projects, files, database records, credentials and command results are synthetic. Do not send real secrets or business data.
Connect using Streamable HTTP:
https://mcp.broadleafservices.com/mcp
Tools: list_projects, list_files, read_file, query_database, get_config, execute_command. No tool executes commands, runs SQL, reads real files, or fetches URLs.
Supports MCP 2025-11-25, 2025-06-18 and 2025-03-26. No legacy SSE stream or 2026 lifecycle support in this release. Sessions and decoy tokens expire after 30 minutes; settings changes revoke them.
Public MCP observations appear after one hour with arbitrary client text withheld. Full retained evidence is private. A request alone does not establish malicious intent or AI use.
Explore the Threat Observatory · Connection information · Privacy
Retention: up to 14 days and 5,000 shared observations. Input, rate and capacity limits apply.