# aisec-registry

What this client asked https://www.pathwren.workers.dev for, from that host's own request log.
Window: 2026-09-01 09:17:24Z to 2026-09-01 09:17:25Z UTC. Generated 2026-09-01.

## User-agent strings, exactly as they arrived

- `aisec-registry/0.2 (+https://sec.sqrx.io)` — 48 request(s), 3 address(es), 2026-09-01 09:17:24Z to 2026-09-01 09:17:25Z

- Requests: 48
- Distinct addresses (salted hashes, never published): 3
- Distinct paths: 13
- Visits (30-minute gap rule): 1
- Status codes: 404×27, 200×21
- Accept headers: application/json, application/json, text/event-stream
- Our classifier called it: agent×48 (ours, from the user-agent)

## What it asked for, in order

1. `/c/mcp-registry-official/mcp/doctor/.well-known/oauth-authorization-server` — 2026-09-01 09:17:24Z — 404
2. `/c/mcp-registry-official/mcp/doctor/.well-known/oauth-protected-resource` — 2026-09-01 09:17:24Z — 404
3. `/c/mcp-registry-official/mcp/doctor/.well-known/mcp` — 2026-09-01 09:17:24Z — 404
4. `/c/mcp-registry-official/mcp/doctor` — 2026-09-01 09:17:24Z — 200
5. `/c/mcp-registry-official/mcp/.well-known/oauth-authorization-server` — 2026-09-01 09:17:24Z — 404
6. `/mcp` — 2026-09-01 09:17:24Z — 200
7. `/c/mcp-registry-official/mcp/.well-known/oauth-protected-resource` — 2026-09-01 09:17:24Z — 404
8. `/c/mcp-registry-official/mcp/.well-known/mcp` — 2026-09-01 09:17:24Z — 404
9. `/c/mcp-registry-official/mcp` — 2026-09-01 09:17:24Z — 200
10. `/c/mcp-registry-official/mcp/triage/.well-known/oauth-authorization-server` — 2026-09-01 09:17:24Z — 404
11. `/c/mcp-registry-official/mcp/triage/.well-known/oauth-protected-resource` — 2026-09-01 09:17:25Z — 404
12. `/c/mcp-registry-official/mcp/triage/.well-known/mcp` — 2026-09-01 09:17:25Z — 404
13. `/c/mcp-registry-official/mcp/triage` — 2026-09-01 09:17:25Z — 200

## What it asked for that did not exist

- `/c/mcp-registry-official/mcp/doctor/.well-known/oauth-authorization-server` — 404×3 — first asked 2026-09-01 09:17:24Z; still absent
- `/c/mcp-registry-official/mcp/doctor/.well-known/oauth-protected-resource` — 404×3 — first asked 2026-09-01 09:17:24Z; still absent
- `/c/mcp-registry-official/mcp/doctor/.well-known/mcp` — 404×3 — first asked 2026-09-01 09:17:24Z; still absent
- `/c/mcp-registry-official/mcp/.well-known/oauth-authorization-server` — 404×3 — first asked 2026-09-01 09:17:24Z; still absent
- `/c/mcp-registry-official/mcp/.well-known/oauth-protected-resource` — 404×3 — first asked 2026-09-01 09:17:24Z; still absent
- `/c/mcp-registry-official/mcp/.well-known/mcp` — 404×3 — first asked 2026-09-01 09:17:24Z; still absent
- `/c/mcp-registry-official/mcp/triage/.well-known/oauth-authorization-server` — 404×3 — first asked 2026-09-01 09:17:24Z; still absent
- `/c/mcp-registry-official/mcp/triage/.well-known/oauth-protected-resource` — 404×3 — first asked 2026-09-01 09:17:25Z; still absent
- `/c/mcp-registry-official/mcp/triage/.well-known/mcp` — 404×3 — first asked 2026-09-01 09:17:25Z; still absent

## Verification

Not observed. This client publishes no address list we could read and no reverse-DNS convention we could test, so the user-agent is the only identity it has here — and a user-agent is a claim, not a proof. Anyone can send this string.

## What it publishes about you

Not observed. We have not seen this client publish a grade, a listing or a record about this host anywhere, and we make no claim that it does or does not.

## Documentation it names

https://sec.sqrx.io

JSON: https://www.pathwren.workers.dev/bot/aisec-registry.json · all clients: https://www.pathwren.workers.dev/data/observed-clients.json