72 named clients, 1541 requests, one host, 2026-08-31 20:58:11Z to 2026-09-01 06:16:32Z UTC (9.3 hours). One page each: the exact user-agent, when it came, how many addresses it came from, the paths it asked for in order, the status codes it got, and what it demanded that did not exist. Nothing here is inferred and nothing here is about intent.
curl -s https://www.pathwren.workers.dev/data/observed-clients.json # all of it, one request curl -s https://www.pathwren.workers.dev/bot/mcpbeat.json # one client curl -s https://www.pathwren.workers.dev/data/observed-clients.csv # the table, flat
Most of these names have no page anywhere on the web. Search for
Orbit-MCP-Registry-IconResolver or exaforce-mcprep and you will find a
line in somebody's log and nothing that says what it fetched, in what order, or what it wanted
that you do not serve. A host that publishes agent-facing documents gets visited by a class of
machine that inspects other machines, and that traffic is invisible to every crawler list,
because those lists document search and AI-training crawlers. This is the other kind, measured
first-hand on one host.
| client | requests | addresses | paths | 404s | first seen | last seen | our class |
|---|---|---|---|---|---|---|---|
| ClaudeBot catalogued | 504 | 2 | 368 | 0 | 2026-09-01 00:46:32Z | 2026-09-01 06:15:19Z | agent |
| archive.org_bot catalogued | 327 | 2 | 270 | 0 | 2026-08-31 20:58:34Z | 2026-09-01 03:00:09Z | crawler |
| YandexBot catalogued | 71 | 65 | 66 | 0 | 2026-08-31 20:58:12Z | 2026-09-01 06:16:32Z | crawler |
| AgentGrade | 67 | 1 | 18 | 14 | 2026-09-01 02:53:17Z | 2026-09-01 02:53:29Z | agent |
| SentinelOracle | 45 | 1 | 1 | 0 | 2026-09-01 01:24:24Z | 2026-09-01 06:13:32Z | agent |
| node library default | 37 | 13 | 9 | 3 | 2026-08-31 22:49:52Z | 2026-09-01 06:16:12Z | agent |
| AgentDisco | 30 | 1 | 29 | 18 | 2026-09-01 02:28:30Z | 2026-09-01 02:28:41Z | crawler |
| mcpbeat | 22 | 1 | 4 | 2 | 2026-09-01 01:43:38Z | 2026-09-01 06:12:16Z | agent |
| Orbit-MCP-Registry-IconResolver | 18 | 4 | 4 | 0 | 2026-08-31 22:09:49Z | 2026-09-01 00:38:25Z | agent |
| apis.io-submit | 13 | 2 | 13 | 0 | 2026-08-31 21:21:01Z | 2026-08-31 21:23:53Z | agent |
| python-httpx2 library default | 12 | 2 | 4 | 0 | 2026-08-31 22:15:20Z | 2026-09-01 02:49:04Z | agent |
| GuzzleHttp library default | 10 | 4 | 4 | 3 | 2026-08-31 22:09:48Z | 2026-09-01 05:04:08Z | agent |
| GolemreachTrustBot | 9 | 1 | 3 | 2 | 2026-09-01 00:48:12Z | 2026-09-01 05:49:08Z | crawler |
| 402explorer | 8 | 1 | 4 | 0 | 2026-09-01 04:08:29Z | 2026-09-01 05:18:37Z | agent |
| A2A-Registry-HealthCheck | 8 | 2 | 1 | 0 | 2026-09-01 02:52:12Z | 2026-09-01 06:01:36Z | agent |
| bingbot catalogued | 8 | 6 | 8 | 0 | 2026-08-31 20:58:11Z | 2026-09-01 01:55:09Z | crawler |
| Mozilla library default | 8 | 3 | 8 | 7 | 2026-09-01 02:49:36Z | 2026-09-01 02:56:57Z | agent |
| undici library default | 8 | 3 | 4 | 3 | 2026-09-01 00:36:09Z | 2026-09-01 03:21:12Z | agent |
| AgentTrust-Monitor | 7 | 1 | 1 | 1 | 2026-09-01 03:08:31Z | 2026-09-01 06:14:31Z | agent |
| Deno library default | 7 | 6 | 4 | 0 | 2026-08-31 22:30:06Z | 2026-09-01 02:34:00Z | agent |
| AgenstryBot | 6 | 1 | 6 | 3 | 2026-09-01 04:28:51Z | 2026-09-01 04:28:51Z | crawler |
| exaforce-mcprep | 6 | 2 | 3 | 2 | 2026-08-31 22:32:28Z | 2026-09-01 03:23:58Z | agent |
| hultra-link | 6 | 2 | 6 | 0 | 2026-08-31 22:10:04Z | 2026-09-01 03:10:04Z | agent |
| MCPWatch | 6 | 1 | 3 | 0 | 2026-09-01 03:49:49Z | 2026-09-01 03:50:30Z | agent |
| movanas-registry-snapshot | 6 | 1 | 3 | 0 | 2026-08-31 22:43:36Z | 2026-08-31 23:06:09Z | agent |
| ProofBench | 6 | 1 | 4 | 0 | 2026-08-31 22:17:01Z | 2026-09-01 05:48:07Z | agent |
| Go-http-client library default | 5 | 1 | 4 | 0 | 2026-08-31 23:00:06Z | 2026-09-01 04:11:39Z | agent |
| io.verifymcp | 5 | 1 | 4 | 0 | 2026-08-31 23:00:06Z | 2026-09-01 04:11:39Z | agent |
| lastseen-schema-probe | 5 | 1 | 4 | 0 | 2026-09-01 06:12:51Z | 2026-09-01 06:12:52Z | agent |
| mcp-registry | 5 | 2 | 1 | 0 | 2026-08-31 22:02:23Z | 2026-09-01 02:29:08Z | agent |
| VerifyMCP-OwnersBot | 5 | 1 | 5 | 4 | 2026-08-31 23:12:20Z | 2026-09-01 04:12:18Z | agent |
| agent-tools.cloud-crawler | 4 | 1 | 4 | 0 | 2026-09-01 03:55:53Z | 2026-09-01 04:10:46Z | crawler |
| AgentIndexBot | 4 | 1 | 3 | 0 | 2026-09-01 04:07:21Z | 2026-09-01 04:26:51Z | crawler |
| AgentReputationBot | 3 | 1 | 3 | 0 | 2026-09-01 03:47:16Z | 2026-09-01 03:47:36Z | crawler |
| Enerlio | 3 | 1 | 1 | 0 | 2026-09-01 01:07:45Z | 2026-09-01 01:07:47Z | agent |
| GPTBot catalogued | 3 | 2 | 3 | 0 | 2026-09-01 05:23:47Z | 2026-09-01 05:28:35Z | agent |
| mcp-checker | 3 | 1 | 3 | 0 | 2026-09-01 05:31:12Z | 2026-09-01 05:31:19Z | agent |
| mcp-observatory | 3 | 1 | 3 | 0 | 2026-09-01 03:08:29Z | 2026-09-01 03:08:30Z | agent |
| mcp-schema-archive | 3 | 1 | 3 | 0 | 2026-09-01 03:37:27Z | 2026-09-01 03:37:27Z | agent |
| MCPCatalogSync | 3 | 3 | 1 | 0 | 2026-09-01 01:36:35Z | 2026-09-01 01:54:15Z | agent |
| measure-mcp-schema | 3 | 1 | 3 | 0 | 2026-09-01 03:33:48Z | 2026-09-01 03:33:48Z | agent |
| utopian-foundry-probe | 3 | 1 | 3 | 0 | 2026-09-01 06:12:38Z | 2026-09-01 06:12:39Z | agent |
| x402-observatory | 3 | 1 | 3 | 0 | 2026-09-01 06:13:13Z | 2026-09-01 06:13:13Z | agent |
| a2a-directory-liveness | 2 | 1 | 2 | 0 | 2026-09-01 02:27:27Z | 2026-09-01 02:27:27Z | agent |
| A2A-Registry-Smoke | 2 | 1 | 2 | 0 | 2026-09-01 02:25:59Z | 2026-09-01 02:25:59Z | agent |
| AetherLink-Public-Discovery-Evidence | 2 | 1 | 2 | 0 | 2026-09-01 04:00:04Z | 2026-09-01 04:01:16Z | agent |
| agent-guild-scout | 2 | 1 | 1 | 0 | 2026-09-01 04:15:17Z | 2026-09-01 04:29:21Z | agent |
| EndpointAudit | 2 | 1 | 2 | 0 | 2026-09-01 01:54:55Z | 2026-09-01 01:54:55Z | agent |
| GF-Agent-Toll-Outbound | 2 | 1 | 2 | 0 | 2026-09-01 02:56:53Z | 2026-09-01 02:56:53Z | agent |
| GF-Agent-Toll-Remediation | 2 | 1 | 2 | 0 | 2026-09-01 03:03:03Z | 2026-09-01 03:03:03Z | agent |
| mcpscan | 2 | 1 | 2 | 0 | 2026-09-01 02:28:50Z | 2026-09-01 02:28:50Z | agent |
| pip | 2 | 1 | 2 | 0 | 2026-09-01 06:13:45Z | 2026-09-01 06:13:45Z | agent |
| python-httpx library default | 2 | 2 | 2 | 0 | 2026-08-31 22:44:55Z | 2026-09-01 02:53:55Z | agent |
| ReactorNetty library default | 2 | 2 | 2 | 0 | 2026-08-31 20:58:14Z | 2026-09-01 05:00:10Z | agent |
| SaSameAgentAudit | 2 | 1 | 2 | 1 | 2026-09-01 01:06:44Z | 2026-09-01 01:06:44Z | agent |
| TelegramBot | 2 | 2 | 2 | 0 | 2026-09-01 05:44:24Z | 2026-09-01 05:44:25Z | crawler |
| truespar-mcp-registry | 2 | 1 | 2 | 0 | 2026-09-01 02:28:06Z | 2026-09-01 02:28:29Z | agent |
| a2a-directory-discovery | 1 | 1 | 1 | 0 | 2026-09-01 02:27:27Z | 2026-09-01 02:27:27Z | agent |
| A2A-Registry | 1 | 1 | 1 | 0 | 2026-09-01 02:25:59Z | 2026-09-01 02:25:59Z | agent |
| AetherLink-Public-Agent-Card-Policy-Check | 1 | 1 | 1 | 0 | 2026-09-01 03:13:23Z | 2026-09-01 03:13:23Z | agent |
| AetherLinkDiscoveryEvidence | 1 | 1 | 1 | 0 | 2026-09-01 03:30:37Z | 2026-09-01 03:30:37Z | agent |
| AgentSure-MCPScan | 1 | 1 | 1 | 0 | 2026-09-01 00:24:23Z | 2026-09-01 00:24:23Z | agent |
| api-forge-mcp-index | 1 | 1 | 1 | 0 | 2026-09-01 01:29:04Z | 2026-09-01 01:29:04Z | agent |
| Conway-Replicatio-r91-strict-a2a-probe | 1 | 1 | 1 | 0 | 2026-09-01 04:56:01Z | 2026-09-01 04:56:01Z | agent |
| curl library default | 1 | 1 | 1 | 0 | 2026-09-01 02:28:30Z | 2026-09-01 02:28:30Z | agent |
| MCPMeter | 1 | 1 | 1 | 0 | 2026-08-31 23:48:38Z | 2026-08-31 23:48:38Z | agent |
| PackageHound | 1 | 1 | 1 | 0 | 2026-09-01 06:13:51Z | 2026-09-01 06:13:51Z | agent |
| SaSame-Census-Era-Probe | 1 | 1 | 1 | 0 | 2026-09-01 01:07:30Z | 2026-09-01 01:07:30Z | agent |
| SaSame-MCP-Audit | 1 | 1 | 1 | 0 | 2026-09-01 01:07:30Z | 2026-09-01 01:07:30Z | agent |
| TAR-Directory-Indexer | 1 | 1 | 1 | 0 | 2026-09-01 03:27:40Z | 2026-09-01 03:27:40Z | agent |
| TAR-Discovery | 1 | 1 | 1 | 0 | 2026-09-01 03:41:21Z | 2026-09-01 03:41:21Z | agent |
| TAR-Health | 1 | 1 | 1 | 0 | 2026-09-01 03:41:21Z | 2026-09-01 03:41:21Z | agent |
Our own traffic is not a client and is never counted. Of 3101 rows in the log:
1554 are ours (they send X-Self: 1, or name this
loop in their user-agent) and 6 more were
flagged by the analyst as one of our own agent runs reaching for one of our URLs through a model
provider's fetch tool — those carry no header of ours and arrive from an address we cannot
recognise, so they are excluded here by name rather than quietly kept. That leaves
1541 external requests, which is what every page here counts.
Also excluded from the dossiers, because there is no operator to name: 9 browser-shaped user-agents and 29 requests with no user-agent at all (4 address(es), 2026-08-31 23:41:45Z to 2026-09-01 05:17:30Z). They are listed here in full instead:
| browser-shaped user-agent | requests | addresses | first seen | last seen |
|---|---|---|---|---|
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.3 | 95 | 1 | 2026-09-01 04:29:34Z | 2026-09-01 05:49:51Z |
Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0 | 31 | 29 | 2026-08-31 22:55:13Z | 2026-09-01 06:12:29Z |
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 | 7 | 6 | 2026-08-31 20:58:23Z | 2026-09-01 02:59:54Z |
Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.3 | 7 | 1 | 2026-08-31 22:16:56Z | 2026-08-31 22:17:44Z |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari | 4 | 2 | 2026-08-31 22:32:32Z | 2026-09-01 03:24:00Z |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.3 | 4 | 1 | 2026-08-31 22:56:04Z | 2026-09-01 04:57:30Z |
Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 | 1 | 1 | 2026-08-31 22:50:13Z | 2026-08-31 22:50:13Z |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.3 | 1 | 1 | 2026-09-01 02:58:19Z | 2026-09-01 02:58:19Z |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/6 | 1 | 1 | 2026-09-01 05:13:10Z | 2026-09-01 05:13:10Z |
observed_at_edge key is
generated from this same corpus, so the regex and these pages cannot drift apart.CC0. Rebuilt from the log on a timer, so tomorrow's clients appear by themselves and yesterday's counts stay true.