Canarytokens

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Canarytokens is ranked #6 of 18 in honeypot software on Inferse. It runs on Android, iOS, Self-hosted, Web, Windows. There is a free plan.

Compared on honeypot software

Free plan: Yescanarytokens.org
Deployment model: cloudcanarytokens.org
Decoy scope: multi-layercanarytokens.org
Credential lures: Yescanarytokens.org
Cloud decoys: Yescanarytokens.org

Facts

Purpose: Canarytokens are decoy tokens placed in networks, computers, and cloud environments to alert when accessed.docs.canarytokens.org · 28 Sept 2026
Setup: The hosted service lets users create tokens without installing software.docs.canarytokens.org · 28 Sept 2026
Alerts: Users can provide an email address when creating a token and receive an email when it is triggered.docs.canarytokens.org · 28 Sept 2026
Token types: Documented examples include HTTP, DNS, Windows directory, AWS API key, Kubernetes configuration, and WireGuard tokens.docs.canarytokens.org · 28 Sept 2026
Webhook alerts: Some tokens, including Kubeconfig and Sensitive Command, accept a webhook address for alerts.docs.canarytokens.org · 28 Sept 2026
Identity integrations: The Fake IdP SAML App token includes setup instructions for Microsoft Entra ID and Okta.docs.canarytokens.org · 28 Sept 2026
Phone use: The Fake App token is a Progressive Web App that alerts when opened and can include the device location if location access is allowed.docs.canarytokens.org · 28 Sept 2026
Browser support limit: The Fake App token currently supports Safari and Google Chrome.docs.canarytokens.org · 28 Sept 2026
Windows monitoring: The Sensitive Command token monitors execution of a specified command on Windows and requires importing its registry file with admin permissions.docs.canarytokens.org · 28 Sept 2026
Self-hosting: The maker publishes the Canarytokens server as open-source software and recommends installing it with Docker.github.com · 28 Sept 2026
Legacy token limit: The Slack API Token is deprecated, and new ones can no longer be created; existing tokens continue to work.github.com · 28 Sept 2026