# posthog probes, 2026-09-17T16:15Z, from a cloud container (one IP), no credentials, no payment
# Bodies are cut at 1500 bytes. Nothing here was sent with a credential.

## 1. MCP initialize, POST https://mcp.posthog.com/mcp
$ curl -sS -i -m 25 -X POST https://mcp.posthog.com/mcp -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' -d '<initialize>'
HTTP/1.1 200 Connection Established

HTTP/2 401 
date: Thu, 17 Sep 2026 16:15:53 GMT
content-type: text/plain;charset=UTF-8
content-length: 145
www-authenticate: Bearer resource_metadata="https://mcp.posthog.com/.well-known/oauth-protected-resource/mcp"
server: cloudflare
cf-ray: a3c96986bd368f97-BOS

No token provided, please provide a valid API token. View the documentation for more information: https://posthog.com/docs/model-context-protocol

## 2. Protected-resource metadata, GET https://mcp.posthog.com/.well-known/oauth-protected-resource/mcp
HTTP/1.1 200 Connection Established

HTTP/2 200 
date: Thu, 17 Sep 2026 16:15:53 GMT
content-type: application/json
content-length: 3128
cache-control: public, max-age=3600
server: cloudflare
cf-ray: a3c9698a6a6364fe-BOS

{"resource":"https://mcp.posthog.com/mcp","authorization_servers":["https://oauth.posthog.com"],"scopes_supported":["openid","profile","email","introspection","action:read","action:write","access_control:read","account:read","account:write","activity_log:read","alert:read","alert:write","annotation:read","annotation:write","approvals:read","approvals:write","batch_export:read","batch_export:write","billing:read","business_knowledge:read","business_knowledge:write","canvas:read","canvas:write","cohort:read","cohort:write","comment:read","comment:write","conversation:read","customer_analytics:read","customer_analytics:write","customer_task:read","customer_task:write","data_catalog:read","data_catalog:write","data_catalog_approval:write","dashboard:read","dashboard:write","dashboard_template:read","dataset:read","dataset:write","early_access_feature:read","early_access_feature:write","endpoint:read","endpoint:write","engineering_analytics:read","error_tracking:read","error_tracking:write","evaluation:read","evaluation:write","element:read","event_definition:read","event_definition:write","experiment:read","experiment:write","experiment_holdout:read","experiment_holdout:write","experiment_saved_metric:read","experiment_saved_metric:write","external_data_source:read","external_data_source:write","feature_flag:read","feature_flag:write","group:read","health_issue:read","heatmap:read","heatmap:write","hog_flow:read","hog_flow:write","hog_function:read","hog_function:write","insight:read","insight:write","insight_variable:write","integration:read","integration:write","llm_analytics:read","llm_analytics:write","ai_observability_clusters:read","ai_observability_clusters:write","llm_prompt:read","llm_prompt:write","llm_provider_key:read","llm_skill:read","llm_skill:write","logs:read","logs:write","loop:read","loop:write","marketing_analytics:read","marketing_analytics:write","mcp_analytics:read","mcp_analytics:write","mcp_registry:read","metrics:read","notebook:read","notebook:write","organization:read","organization:write","organization_member:read","person:read","person:write","product_enablement:write","project:read","project:write","property_definition:read","property_definition:write","query:read","replay_scanner:read","replay_scanner

## 3. Authorization-server metadata, GET https://oauth.posthog.com/.well-known/oauth-authorization-server
HTTP/1.1 200 Connection Established

HTTP/2 200 
date: Thu, 17 Sep 2026 16:15:54 GMT
content-type: application/json
content-length: 5777
access-control-allow-origin: *
cache-control: public, max-age=3600
server: cloudflare
cf-ray: a3c9698e3bdf3d15-BOS

{"issuer":"https://oauth.posthog.com","authorization_endpoint":"https://oauth.posthog.com/oauth/authorize/","token_endpoint":"https://oauth.posthog.com/oauth/token/","userinfo_endpoint":"https://oauth.posthog.com/oauth/userinfo/","revocation_endpoint":"https://oauth.posthog.com/oauth/revoke/","introspection_endpoint":"https://oauth.posthog.com/oauth/introspect/","registration_endpoint":"https://oauth.posthog.com/oauth/register/","jwks_uri":"https://oauth.posthog.com/.well-known/jwks.json","scopes_supported":["openid","profile","email","introspection","action:read","action:write","access_control:read","access_control:write","account:read","account:write","activity_log:read","activity_log:write","alert:read","alert:write","annotation:read","annotation:write","approvals:read","approvals:write","autoresearch:read","autoresearch:write","batch_export:read","batch_export:write","batch_import:read","batch_import:write","billing:read","billing:write","business_knowledge:read","business_knowledge:write","canvas:read","canvas:write","cohort:read","cohort:write","comment:read","comment:write","conversation:read","conversation:write","customer_analytics:read","customer_analytics:write","customer_task:read","customer_task:write","customer_journey:read","customer_journey:write","customer_profile_config:read","customer_profile_config:write","data_catalog:read","data_catalog:write","data_catalog_approval:read","data_catalog_approval:write","dashboard:read","dashboard:write","event_filter:read","event_filter:write","dashboard_template:read","dashboard_template:write","dataset:read","dataset:write","early_access_feature:read","early_access_feature:write","endpoint:read","endpoint:write","engineering_analytics:read","engineering_analytics:write","error_tracking:read","error_tracking:write","evaluation:read","evaluation:write","element:read","element:write","event_definition:read","event_definition:write","experiment:read","experiment:write","experiment_holdout:read","experiment_holdout:write","experiment_saved_metric:read","experiment_saved_metric:write","export:read","export:write","external_data_schema:read","external_data_schema:write","external_data_source:read","external_data_source:write","feature_flag:read","feature_flag:write","file_system:read","file_system:write","file_system_shortcut:read","file_system_shortcut:write","group:read","group:write","health_issue:read","health_issue:write","heatmap:read","heatmap:write","hog_flow:read","hog_flow:write","hog_function:read","hog_function:write","ingestion_warning:read","ingestion_warning:write","insight:read","insight:write","insight_variable:read","insight_variable:write","integration:read","integration:write","legal_document:read","legal_document:write","link:read","link:write","live_debugger:read","live_debugger:write","llm_analytics:read","llm_analytics:write","ai_observability_clusters:read","ai_observability_clusters:write","llm_playground:read","llm_playground:write","llm_prompt:read","llm_prompt:write","llm_provider_key:read","llm_provider_key:write","llm_skill:read","llm_skill:write","logs:read","logs:write","loop:read","loop:write","marketing_analytics:read","marketing_analytics:write","mcp_analytics:read","mcp_analytics:write","mcp_registry:read","mcp_registry:write","metrics:read","metrics:write","notebook:read","notebook:write","organization:read","organization:write","organization_integration:read","organization_integration:write","organization_member:read","organization_member:write","person:read","person:write","plugin:read","plugin:write","product_enablement:read","product_enablement:write","product_tour:read","product_tour:write","project:read","project:write","property_definition:read","property_definition:write","query:read","query:write","replay_scanner:read","replay_scanner:write","review_hog:read","review_hog:write","revenue_analytics:read","revenue_analytics:write","session_recording:read","session_recording:write","session_recording_playlist:read","session_recording_playlist:write","sharing_configuration:read","sharing_configuration:write","signal_scout:read","signal_scout:write","stamphog:read","stamphog:write","streamlit_app:read","streamlit_app:write","subscription:read","subscription:write","survey:read","survey:write","tagger:read","tagger:write","ticket:read","ticket:write","task:read","task:write","toolbar:read","toolbar:write","tracing:read","tracing:write","field_note:read","field_note:write","uploaded_media:read","uploaded_media:write","usage_metric:read","usage_metric:write","user:read","user:write","user_interview:read","user_interview:write","vision_action:read","vision_action:write","vision_alert:read","vision_alert:write","visual_review:read","visual_review:write","warehouse_objects:read","warehouse_objects:write","warehouse_table:read","warehouse_table:write","warehouse_view:read","warehouse_view:write","web_analytics:read","web_analytics:write","webhook:read","webhook:write"],"response_types_supported":["code"],"response_modes_supported":["query"],"grant_types_supported":["authorization_code","refresh_token","urn:ietf:params:oauth:grant-type:jwt-bearer"],"token_endpoint_auth_methods_supported":["none","client_secret_post","private_key_jwt"],"code_challenge_methods_supported":["S256"],"service_documentation":"https://posthog.com/docs/api","authorization_grant_profiles_supported":["urn:ietf:params:oauth:grant-profile:id-jag"],"client_id_metadata_document_supported":true,"agent_auth":{"skill":"https://oauth.posthog.com/auth.md","identity_endpoint":"https://oauth.posthog.com/oauth/token/","identity_types_supported":["identity_assertion"],"identity_assertion":{"assertion_types_supported":["urn:ietf:params:oauth:token-type:id-jag"]}},"posthog_region":"us","posthog_base_url":"https://us.posthog.com"}

## 4. REST, GET https://us.posthog.com/api/projects/@current/, no Authorization header
HTTP/1.1 200 Connection Established

HTTP/2 401 
date: Thu, 17 Sep 2026 16:15:55 GMT
content-type: application/json
content-length: 127
www-authenticate: Bearer resource_metadata="https://us.posthog.com/.well-known/oauth-protected-resource"
allow: GET, PUT, PATCH, DELETE, HEAD, OPTIONS
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'none'
vary: origin, Cookie, Accept-Encoding
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
cross-origin-opener-policy: same-origin
server: envoy
x-envoy-upstream-service-time: 5
strict-transport-security: max-age=31536000; includeSubDomains

{"type":"authentication_error","code":"not_authenticated","detail":"Authentication credentials were not provided.","attr":null}

## 5. The REST API's own protected-resource metadata, GET https://us.posthog.com/.well-known/oauth-protected-resource (named by the www-authenticate in step 4)
HTTP/1.1 200 Connection Established

HTTP/2 200 
date: Thu, 17 Sep 2026 16:15:55 GMT
content-type: application/json
content-length: 4856
access-control-allow-origin: *
allow: GET, HEAD, OPTIONS
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'none'
vary: Cookie, Accept-Encoding
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
cross-origin-opener-policy: same-origin
server: envoy
x-envoy-upstream-service-time: 8
strict-transport-security: max-age=31536000; includeSubDomains

{"resource": "https://us.posthog.com", "authorization_servers": ["https://us.posthog.com"], "scopes_supported": ["openid", "profile", "email", "introspection", "action:read", "action:write", "access_control:read", "access_control:write", "account:read", "account:write", "activity_log:read", "activity_log:write", "alert:read", "alert:write", "annotation:read", "annotation:write", "approvals:read", "approvals:write", "autoresearch:read", "autoresearch:write", "batch_export:read", "batch_export:write", "batch_import:read", "batch_import:write", "billing:read", "billing:write", "business_knowledge:read", "business_knowledge:write", "canvas:read", "canvas:write", "cohort:read", "cohort:write", "comment:read", "comment:write", "conversation:read", "conversation:write", "customer_analytics:read", "customer_analytics:write", "customer_task:read", "customer_task:write", "customer_journey:read", "customer_journey:write", "customer_profile_config:read", "customer_profile_config:write", "data_catalog:read", "data_catalog:write", "data_catalog_approval:read", "data_catalog_approval:write", "dashboard:read", "dashboard:write", "event_filter:read", "event_filter:write", "dashboard_template:read", "dashboard_template:write", "dataset:read", "dataset:write", "early_access_feature:read", "early_access_feature:write", "endpoint:read", "endpoint:write", "engineering_analytics:read", "engineering_analytics:write", "error_tracking:read", "error_tracking:write", "evaluation:read", "evaluation:write", "element:read", "element:write", "event_definition:read", "event_definition:write", "experiment:read", "experiment:write", "experiment_holdout:read", "experiment_holdout:write", "experiment_saved_metric:read", "experiment_saved_metric:write", "export:read", "export:write", "external_data_schema:read", "external_data_schema:write", "external_data_source:read", "external_data_source:write", "feature_flag:read", "feature_flag:write", "file_system:rea

## 6. Authorization-server metadata of the server step 5 names, GET https://us.posthog.com/.well-known/oauth-authorization-server
HTTP/1.1 200 Connection Established

HTTP/2 200 
date: Thu, 17 Sep 2026 16:17:00 GMT
content-type: application/json
content-length: 6013
access-control-allow-origin: *
allow: GET, HEAD, OPTIONS
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'none'
vary: Cookie, Accept-Encoding
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
cross-origin-opener-policy: same-origin
server: envoy
x-envoy-upstream-service-time: 7
strict-transport-security: max-age=31536000; includeSubDomains

{"issuer": "https://us.posthog.com", "authorization_endpoint": "https://us.posthog.com/oauth/authorize/", "token_endpoint": "https://us.posthog.com/oauth/token/", "userinfo_endpoint": "https://us.posthog.com/oauth/userinfo/", "revocation_endpoint": "https://us.posthog.com/oauth/revoke/", "introspection_endpoint": "https://us.posthog.com/oauth/introspect/", "registration_endpoint": "https://us.posthog.com/oauth/register/", "jwks_uri": "https://us.posthog.com/.well-known/jwks.json", "scopes_supported": ["openid", "profile", "email", "introspection", "action:read", "action:write", "access_control:read", "access_control:write", "account:read", "accou