# SmitheryBot

What this client asked https://www.pathwren.workers.dev for, from that host's own request log.
Window: 2026-09-02 09:06:23Z to 2026-09-02 09:07:23Z UTC. Generated 2026-09-02.

## User-agent strings, exactly as they arrived

- `SmitheryBot/1.0 (+https://smithery.ai)` — 15 request(s), 1 address(es), 2026-09-02 09:06:23Z to 2026-09-02 09:07:23Z

- Requests: 15
- Distinct addresses (salted hashes, never published): 1
- Distinct paths: 11
- Visits (30-minute gap rule): 1
- Status codes: 404×10, 200×5
- Accept headers: application/json, text/event-stream
- Our classifier called it: crawler×15 (ours, from the user-agent)

## What it asked for, in order

1. `/c/smithery/mcp` — 2026-09-02 09:06:23Z — 200
2. `/.well-known/oauth-protected-resource/c/smithery/mcp` — 2026-09-02 09:06:23Z — 404
3. `/.well-known/oauth-protected-resource` — 2026-09-02 09:06:23Z — 404
4. `/c/smithery/mcp/triage` — 2026-09-02 09:06:38Z — 200
5. `/.well-known/oauth-protected-resource/c/smithery/mcp/triage` — 2026-09-02 09:06:38Z — 404
6. `/c/smithery/mcp/doctor` — 2026-09-02 09:06:50Z — 200
7. `/.well-known/oauth-protected-resource/c/smithery/mcp/doctor` — 2026-09-02 09:06:50Z — 404
8. `/c/smithery/mcp/robots` — 2026-09-02 09:07:07Z — 200
9. `/.well-known/oauth-protected-resource/c/smithery/mcp/robots` — 2026-09-02 09:07:07Z — 404
10. `/c/smithery/mcp/netcheck` — 2026-09-02 09:07:23Z — 200
11. `/.well-known/oauth-protected-resource/c/smithery/mcp/netcheck` — 2026-09-02 09:07:23Z — 404

## What it asked for that did not exist

- `/.well-known/oauth-protected-resource/c/smithery/mcp` — 404×1 — first asked 2026-09-02 09:06:23Z; still absent
- `/.well-known/oauth-protected-resource` — 404×5 — first asked 2026-09-02 09:06:23Z; still absent, on purpose — No (https://www.pathwren.workers.dev/security.html)
- `/.well-known/oauth-protected-resource/c/smithery/mcp/triage` — 404×1 — first asked 2026-09-02 09:06:38Z; still absent
- `/.well-known/oauth-protected-resource/c/smithery/mcp/doctor` — 404×1 — first asked 2026-09-02 09:06:50Z; still absent
- `/.well-known/oauth-protected-resource/c/smithery/mcp/robots` — 404×1 — first asked 2026-09-02 09:07:07Z; still absent
- `/.well-known/oauth-protected-resource/c/smithery/mcp/netcheck` — 404×1 — first asked 2026-09-02 09:07:23Z; still absent

## Verification

Not observed. This client publishes no address list we could read and no reverse-DNS convention we could test, so the user-agent is the only identity it has here — and a user-agent is a claim, not a proof. Anyone can send this string.

## What it publishes about you

Not observed. We have not seen this client publish a grade, a listing or a record about this host anywhere, and we make no claim that it does or does not.

## Documentation it names

https://smithery.ai

JSON: https://www.pathwren.workers.dev/bot/smitherybot.json · all clients: https://www.pathwren.workers.dev/data/observed-clients.json