# onfleet probes, 2026-09-18T06:08Z, from a cloud container (one IP), no credentials, no payment
# Responses are cut at 6000 bytes (initialize), 2500 (protected resource), 9000 (authorization server), 4000 (REST). Nothing here was sent with a credential.

## 1. MCP initialize, POST https://mcp.onfleet.com/mcp
$ curl -sS -i -m 25 -X POST https://mcp.onfleet.com/mcp -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' -d '<initialize>'
HTTP/1.1 200 Connection Established

HTTP/2 401 
date: Fri, 18 Sep 2026 06:08:07 GMT
content-type: application/json
content-length: 144
www-authenticate: Bearer resource_metadata="https://mcp.onfleet.com/.well-known/oauth-protected-resource"

{"ok":false,"data":null,"error":{"code":"E_UNAUTHORIZED","message":"unauthorized"},"meta":{"request_id":"326c73b6-c111-4609-afce-7062fc2ead96"}}

## 2. Protected-resource metadata, GET https://mcp.onfleet.com/.well-known/oauth-protected-resource
HTTP/1.1 200 Connection Established

HTTP/2 200 
date: Fri, 18 Sep 2026 06:08:08 GMT
content-type: application/json
content-length: 128
access-control-allow-origin: *
cache-control: public, max-age=3600

{"resource":"https://mcp.onfleet.com","authorization_servers":["https://mcp.onfleet.com"],"bearer_methods_supported":["header"]}

## 3. Authorization-server metadata, GET https://mcp.onfleet.com/.well-known/oauth-authorization-server
HTTP/1.1 200 Connection Established

HTTP/2 200 
date: Fri, 18 Sep 2026 06:08:08 GMT
content-type: application/json
content-length: 492
access-control-allow-origin: *
cache-control: public, max-age=3600

{"issuer":"https://mcp.onfleet.com","registration_endpoint":"https://mcp.onfleet.com/oauth/register","authorization_endpoint":"https://mcp.onfleet.com/oauth/authorize","token_endpoint":"https://auth.us.prod.onfleet.com/oauth/token","jwks_uri":"https://auth.us.prod.onfleet.com/.well-known/jwks.json","response_types_supported":["code"],"grant_types_supported":["authorization_code","refresh_token"],"token_endpoint_auth_methods_supported":["none"],"code_challenge_methods_supported":["S256"]}

## 4. REST, GET https://onfleet.com/api/v2/organization, no Authorization header
HTTP/1.1 200 Connection Established

HTTP/2 401 
date: Fri, 18 Sep 2026 06:08:09 GMT
content-type: application/json
content-length: 286
server: nginx

{"code":"InvalidCredentials","message":{"error":1102,"message":"The API key provided is invalid.","cause":"The API key provided is not valid. Please contact support@onfleet.com for further assistance.","request":"406cd1cc-7fd6-45fe-845f-22117b01684d","remoteAddress":"205.188.204.187"}}