# intercom probes, 2026-09-17T18:15Z, from a cloud container (one IP), no credentials, no payment
# Responses are cut at 6000 bytes (initialize), 2500 (protected resource), 9000 (authorization server), 4000 (REST). Nothing here was sent with a credential.

## 1. MCP initialize, POST https://mcp.intercom.com/mcp
$ curl -sS -i -m 25 -X POST https://mcp.intercom.com/mcp -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' -d '<initialize>'
HTTP/1.1 200 Connection Established

HTTP/2 401 
date: Thu, 17 Sep 2026 18:15:05 GMT
content-type: application/json
content-length: 79
www-authenticate: Bearer realm="OAuth", error="invalid_token", error_description="Missing or invalid access token"
set-cookie: __cf_bm=[redacted by the prober: a session cookie, never published]
server: cloudflare
cf-ray: a3ca18205f774ce8-BOS

{"error":"invalid_token","error_description":"Missing or invalid access token"}

## 2. Protected-resource metadata, GET https://mcp.intercom.com/.well-known/oauth-protected-resource/mcp (not named in the challenge; the RFC 9728 default path)
HTTP/1.1 200 Connection Established

HTTP/2 404 
date: Thu, 17 Sep 2026 18:15:05 GMT
content-type: text/plain; charset=UTF-8
content-length: 13
set-cookie: __cf_bm=[redacted by the prober: a session cookie, never published]
server: cloudflare
cf-ray: a3ca18245d259062-BOS

404 Not Found

## 3. Authorization-server metadata: no authorization_servers in step 2

## 4. REST, GET https://api.intercom.io/me, no Authorization header
HTTP/1.1 200 Connection Established

HTTP/2 401 
date: Thu, 17 Sep 2026 18:15:06 GMT
content-type: application/json; charset=utf-8
status: 401 Unauthorized
vary: Accept
x-intercom-version: 0142edab8d5454a25176fdbcda0da6986fc772bc
www-authenticate: Basic realm="intercom.io"
x-request-id: 000pvv9gjmm537k4od1g
x-frame-options: SAMEORIGIN
cache-control: no-cache
strict-transport-security: max-age=31556952; includeSubDomains; preload
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
x-request-queueing: 0
x-runtime: 0.005037
x-content-type-options: nosniff
server: nginx

{"type":"error.list","request_id":"000pvv9gjmm537k4od1g","errors":[{"code":"missing_authorization","message":"No authorization was provided"}]}