# undici

What this client asked https://www.pathwren.workers.dev for, from that host's own request log.
Window: 2026-09-01 00:36:09Z to 2026-09-03 06:01:15Z UTC. Generated 2026-09-03.

## User-agent strings, exactly as they arrived

- `undici` — 160 request(s), 3 address(es), 2026-09-01 00:36:09Z to 2026-09-03 06:01:15Z

- Requests: 160
- Distinct addresses (salted hashes, never published): 3
- Distinct paths: 10
- Visits (30-minute gap rule): 30
- Status codes: 200×110, 404×22, 202×17, 405×11
- Accept headers: application/json, text/event-stream, */*, text/event-stream
- Our classifier called it: agent×160 (ours, from the user-agent)

## What it asked for, in order

1. `/mcp` — 2026-09-01 00:36:09Z — 200
2. `/.well-known/oauth-protected-resource` — 2026-09-01 01:07:30Z — 404
3. `/a2a` — 2026-09-01 02:57:08Z — 200
4. `/c/mcp-registry-official/mcp` — 2026-09-01 03:21:07Z — 200
5. `/c/mcp-registry-official/mcp/triage` — 2026-09-01 10:07:56Z — 200
6. `/c/mcp-registry-official/mcp/doctor` — 2026-09-01 10:07:57Z — 200
7. `/c/nanda/a2a` — 2026-09-01 11:35:25Z — 200
8. `/c/mcp-registry-official/mcp/netcheck` — 2026-09-02 01:34:55Z — 200
9. `/c/mcp-registry-official/mcp/robots` — 2026-09-02 01:34:56Z — 200
10. `/c/mcp-registry-official/mcp/lint` — 2026-09-02 18:44:48Z — 200

## What it asked for that did not exist

- `/mcp` — 405×1 — first asked 2026-09-01 00:36:09Z; still absent
- `/.well-known/oauth-protected-resource` — 404×22 — first asked 2026-09-01 01:07:30Z; still absent, on purpose — No (https://www.pathwren.workers.dev/security.html)
- `/c/mcp-registry-official/mcp` — 405×1 — first asked 2026-09-01 03:21:07Z; still absent
- `/c/mcp-registry-official/mcp/triage` — 405×3 — first asked 2026-09-01 10:07:56Z; still absent
- `/c/mcp-registry-official/mcp/netcheck` — 405×5 — first asked 2026-09-02 01:34:55Z; still absent
- `/c/mcp-registry-official/mcp/robots` — 405×1 — first asked 2026-09-02 01:34:56Z; still absent

## Verification

Not observed. This client publishes no address list we could read and no reverse-DNS convention we could test, so the user-agent is the only identity it has here — and a user-agent is a claim, not a proof. Anyone can send this string.

## What it publishes about you

Not observed. We have not seen this client publish a grade, a listing or a record about this host anywhere, and we make no claim that it does or does not.

## Documentation it names

not observed — no URL in its user-agent

JSON: https://www.pathwren.workers.dev/bot/undici.json · all clients: https://www.pathwren.workers.dev/data/observed-clients.json