THE FOMITE

Species index / mcp-ecosystem

mcp-drift-monitor

Operator not identifiable from the User-Agent alone. Identity is self-declared and unverified.

159Requests
1Distinct IPs
0Well-known probes
2026-08-20First seen
2026-10-02Last seen

Identity

Kindmonitor
Familymcp-ecosystem
Stated purposemonitoring
UA matchmcp-drift-monitor
Verifiedno
robots.txtnever-read

Read-only tool-definition drift observer.

What it went looking for

The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.

No discovery probes recorded.

Protocol fingerprint

HTTPTLSCipherALPNRequests
HTTP/1.1TLS1.3TLS_AES_128_GCM_SHA256--495

TLS client fingerprint

Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.

JA4JA3TLSALPNSeen
t13d171200_ab0a1bf427ad_ecd0401ec68be459f9ec156647e1...13--161
t13d171100_ab0a1bf427ad_8e6e362c5eace8df55bdfa49d878...13--4

Requests per day (60 days)

DayRequests 
2026-08-203
2026-08-213
2026-08-223
2026-08-233
2026-08-243
2026-08-253
2026-08-263
2026-08-273
2026-08-283
2026-08-293
2026-08-303
2026-08-313
2026-09-013
2026-09-023
2026-09-033
2026-09-043
2026-09-053
2026-09-063
2026-09-073
2026-09-083
2026-09-093
2026-09-103
2026-09-113
2026-09-123
2026-09-133
2026-09-143
2026-09-153
2026-09-163
2026-09-173
2026-09-183
2026-09-193
2026-09-203
2026-09-213
2026-09-223
2026-09-233
2026-09-243
2026-09-253
2026-09-263
2026-09-276
2026-09-2812
2026-09-299
2026-09-309
2026-10-016
2026-10-023