Research

Field notes.

What we see on mcp-senuelo, an open MCP server and A2A agent that says it is a research decoy. Short, dated, with the numbers frozen at publication. Atom feed.

• 9 November 2026

  AI agents trust what an MCP server says about itself

  We gave Claude Code ordinary user tasks with our decoy connected. When the server said it was a research decoy, the agent protected the user every time. When the same server looked like an ordinary toolbox, it sent an API key 6 times out of 6.

• 9 November 2026

  An open MCP server's first 30 hours: 155 clients, no real work

  We listed a declared research decoy in the official MCP Registry and watched who came. Directories, uptime monitors, security checks and scanners arrived within minutes. None of the 338 MCP visitors used a tool for a real task.