# samsara probes, 2026-09-18T06:08Z, from a cloud container (one IP), no credentials, no payment
# Responses are cut at 6000 bytes (initialize), 2500 (protected resource), 9000 (authorization server), 4000 (REST). Nothing here was sent with a credential.

## 1. MCP initialize, POST https://mcp.samsara.com/mcp
$ curl -sS -i -m 25 -X POST https://mcp.samsara.com/mcp -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' -d '<initialize>'
HTTP/1.1 200 Connection Established

HTTP/2 401 
date: Fri, 18 Sep 2026 06:08:04 GMT
content-type: application/json
content-length: 24
www-authenticate: Bearer realm="mcp"

{"error":"unauthorized"}

## 2. Protected-resource metadata, GET https://mcp.samsara.com/.well-known/oauth-protected-resource/mcp (not named in the challenge; the RFC 9728 default path)
HTTP/1.1 200 Connection Established

HTTP/2 404 
date: Fri, 18 Sep 2026 06:08:05 GMT
content-type: text/plain; charset=utf-8
content-length: 19
x-content-type-options: nosniff

404 page not found


## 3. Authorization-server metadata: no authorization_servers in step 2

## 4. REST, GET https://api.samsara.com/fleet/vehicles, no Authorization header
HTTP/1.1 200 Connection Established

HTTP/2 401 
date: Fri, 18 Sep 2026 06:08:06 GMT
content-type: application/json; charset=utf-8
content-length: 59
request-id: ihummpnb
vary: Accept-Encoding
x-content-type-options: nosniff

{"message":"invalid token","requestId":"ihummpnb-upohzxnq"}