Species index / mcp-ecosystem

mcp-rugpull-research

Operator not identifiable from the User-Agent alone. Identity is self-declared and unverified.

Identity

Security researcher probing for 'rug pull' tool-description drift between calls.

What it went looking for

The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.

No discovery probes recorded.

Protocol fingerprint

TLS client fingerprint

Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.

Requests per day (60 days)