MIT · no telemetry · Windows / macOS / Linux

Detect compromise.
Contain the next action.

Free V1.2.7 adds shared identity quarantine and an optional secret-free credential revoker to the guarded SDK containment path.

Download free V1.2.7 →

12 inert decoy tools

Fake wire transfer, fake prod-secrets reader, fake sudo shell, fake Kubernetes exec, fake cloud-console credentials — tempting, admin-grade, and completely inert. A healthy agent never calls them; a hijacked one can't resist.

Canary tokens

Unique, worthless cnry_… strings planted in honeypot files. The moment one appears anywhere it shouldn't — agent output, an outbound request, CI — a secret was stolen.

Session circuit breaker

For SDK integrations, a decoy or canary hit synchronously trips and quarantines one session. Later guarded dangerous calls are blocked and audited.

Free V1.2.7 / V2 unlocked by subscription

The public repository provides V1; V2 benefits are shown here without publishing private source.

V1.2.7 Basic · Free

Free forever

Decoys · canary tokens · leak scanning · local alerts · MCP install · guarded circuit breaker · shared identity quarantine

Download V1.2.7

V2 Personal · Paid

Activate after subscription

Advanced eval · attack-chain dashboard · SIEM export · signed license

Download software →

V2 Personal currently uses a manual WeChat Pay / Alipay confirmation flow. After payment, email the activation identifier and payment reference; delivery happens only after the seller verifies the transfer. View payment instructions →

Cooperation & integration

For MCP clients, AI-agent teams, security researchers, and DevSecOps pilots: integration, reproducible evaluation, private deployment, and custom support.

Start a collaboration →

已进入官方 MCP Registry，并保留 Glama 展示页；Snyk TAPP 是候选集成渠道，不进行骚扰式推广。

One command to arm

Works with Claude Code, Cursor, Cline, Windsurf — any MCP client. The token scanner works with any agent.

$ Node.js 20+ required
$ curl -L https://github.com/DorianChn/shanchuanzhi-agent-canary/releases/download/v2.0.0-personal/agent-canary-2.0.0.tgz -o agent-canary-2.0.0.tgz
$ npm install -g ./agent-canary-2.0.0.tgz
$ agent-canary tokens plant .env.canary --label prod
[ok] 3 canary tokens planted in .env.canary
$ agent-canary install claude
[ok] registered in ~/.claude.json (backup created)

# if an agent ever touches a decoy or leaks a token:
!!! COMPROMISE SIGNAL — decoy tool touched !!!
tool = canary_read_secrets   args = {"environment":"production"}

Detect compromise.Contain the next action.