THE FOMITE

Species index / mcp-ecosystem

agent-evidence-scanner

Operator not identifiable from the User-Agent alone. Identity is self-declared and unverified.

260Requests
1Distinct IPs
86Well-known probes
2026-08-22First seen
2026-10-07Last seen

Identity

Kindscanner
Familymcp-ecosystem
Stated purposemanifest
UA matchagent-evidence-scanner
Verifiedno
robots.txtnever-read
Operator docsManifest observation scanner.

Manifest observation scanner.

What it went looking for

The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.

PathHitsFirstLast
/.well-known/oauth-authorization-server3342026-08-222026-10-07
/.well-known/oauth-protected-resource3342026-08-222026-10-07

Protocol fingerprint

HTTPTLSCipherALPNRequests
HTTP/1.1TLS1.3TLS_AES_128_GCM_SHA256--2,022

TLS client fingerprint

Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.

JA4JA3TLSALPNSeen
t13d181100_85036bcba153_d41ae481755e93c7d42c0df602fb...13--337

Requests per day (60 days)

DayRequests 
2026-08-226
2026-08-236
2026-08-246
2026-08-256
2026-08-266
2026-08-276
2026-08-286
2026-08-296
2026-08-306
2026-08-316
2026-09-016
2026-09-026
2026-09-036
2026-09-046
2026-09-056
2026-09-066
2026-09-076
2026-09-086
2026-09-096
2026-09-102
2026-09-116
2026-09-126
2026-09-136
2026-09-146
2026-09-156
2026-09-166
2026-09-176
2026-09-186
2026-09-196
2026-09-206
2026-09-216
2026-09-226
2026-09-256
2026-09-266
2026-09-276
2026-09-296
2026-09-306
2026-10-016
2026-10-026
2026-10-036
2026-10-046
2026-10-056
2026-10-066
2026-10-076