Both clients · classified hoppers only

Who is coming to you

Every hop 302 is classified at the edge. Read the mix first: browser-like hops can become a PostHog buy, tool fetches usually cannot. Only today. Use this to see who is hopping right now. IP, raw User-Agent, query, cookies, body, prompts, and buyer identity are discarded.

Monid · monid.ai · Last 24 hours

7 hoppers · 8 sends

A hopper is a daily HMAC nick, not a person. Read Path A vs B/C next — only browser-like hops can later join a buy in PostHog.

How to read this page

Hop — a 302 we issued. This is the only send we can prove.
Impression — they saw our listing. Not a hop, not a buyer.
Daily nick — HMAC(day, IP, UA). Rotates at 00:00 UTC. Not a person.
Path A / B / C — A is a human-looking click. B is a tool fetch then a later human. C is the agent as buyer. We infer A vs B/C from headers. We do not store IP or raw User-Agent.

Hops 8

302s we issued. The only send we can prove.

Daily nicks 7

HMAC(day, IP, UA). Rotates at 00:00 UTC. Not a person.

Hops / nick 1.14

Same nick hopping more than once in a UTC day.

Impressions 0

0 nicks saw an index/MCP listing. A saw, not a hop.

Do not read impressions → hops as a funnel. Most hops come from listings we do not see as a saw, so hops can be larger.

Who they look like when they hop

37.5% of hops could be either a browser or a tool. 0.0% look like a human/browser click (Path A). 62.5% look like an agent/tool fetch (Path B or C).

Path A · 0.0%

Looks like a human / browser click

Sec-Fetch-Dest=document or a browser UA. If a person opened the hop, PostHog can later join a buy.

Path B / C · 62.5%

Looks like an agent / tool fetch

curl, python, JSON Accept, or a CORS fetch. The tool read the page. A later human buy is usually unjoinable unless they keep utm_id.

Either · 37.5%

Headers were not enough to tell

Still a real hop. We do not guess. Role is a proxy, not a person label.

How they found you

They find the hop most through Publisher network (100.0%). They open Remote MCP most often.

Channel is the listing that held the hop (utm_term). Dest is the page or file the 302 pointed at (utm_content).

Channel

Where the agent discovered the hop.

1
Publisher network
8 100.0% · 7 nicks

Destination on your site

Which of your landings we sent them to.

1
Remote MCP
5 62.5% · 4 nicks
2
Skill file
2 25.0% · 2 nicks
3
MCP setup guide
1 12.5% · 1 nicks

Can their PostHog see it?

HTML page · 0.0% 0

PostHog can see this hop if their JS is on the page.

File / install · 37.5% 3

Markdown, text, or install. PostHog JS will not fire. We still count the hop.

API intake · 62.5% 5

Machine endpoint. No pageview. A buy only joins if they copy utm_id onto the key or invoice.

Auth redirect · 0.0% 0

Immediate login/signup redirect. Query is dropped unless they persist utm_id first.

0.0% of hops landed on HTML. Only those can appear in the client PostHog project unless they server-capture the query string.

Where the request came from

Cloudflare saw United States (US) most often (75.0%). That is the hopper, not a buyer address.

Country

ISO country of the hop request.

1
United States (US)
6 75.0% · 5 nicks
2
Finland (FI)
2 25.0% · 2 nicks

Cloudflare colo

Edge city that saw the 302.

1
ORD
5 62.5% · 4 nicks
2
WAW
2 25.0% · 2 nicks
3
IAD
1 12.5% · 1 nicks

Continent

1
NA
6 75.0% · 5 nicks
2
EU
2 25.0% · 2 nicks

Network family

1
google
5 62.5% · 4 nicks
2
hetzner
2 25.0% · 2 nicks
3
microsoft
1 12.5% · 1 nicks

What the operator declared

bing leads at 1 hops (12.5%).

Allowlisted families only. Raw User-Agent is discarded after we pick a family.

UA family

1
none
7 87.5% · 6 nicks
2
bing
1 12.5% · 1 nicks

Accept-Language

Primary language class (en, zh, …). Not a person name.

1
und
8 100.0% · 7 nicks

Agent class

verified_agent / declared_ai / likely_agent.

1
likely_agent
8 100.0% · 7 nicks

How we decided

declared UA, machine endpoint, signed, or unknown.

1
machine_endpoint
8 100.0% · 7 nicks

Bot score band

Bot score was not present on these hops.

Kind

browser vs api, from Accept and path.

1
api
5 62.5% · 4 nicks
2
browser
3 37.5% · 3 nicks

How they asked for the hop

json leads at 5 hops (62.5%).

These classified headers are the best proxy for browser vs tool. We never store the raw strings.

Accept

html = wants a page. text/json = usually a tool.

1
json
5 62.5% · 4 nicks
2
wildcard
3 37.5% · 3 nicks

Fetch dest

document = browser navigation. empty/cors = usually a fetch.

1
empty
8 100.0% · 7 nicks

HTTP version

1
h2
6 75.0% · 5 nicks
2
h1
2 25.0% · 2 nicks

TLS

1
tls13
7 87.5% · 6 nicks
2
unknown
1 12.5% · 1 nicks

When the hops happened

UTC send time of the 302. This is not purchase time. 7d drops days older than a week.

Hops by day

Peak 10-23: 4 hops

Calendar day of the 302.

Hour of day (UTC)

Busiest hour 02:00 UTC — 3 hops

Send time of the 302, not purchase time. Darker is more hops.

00
01
02 3
03
04
05 1
06 2
07
08 1
09
10
11 1
12
13
14
15
16
17
18
19
20
21
22
23

Recent hops

Latest classified 302s. Nick is eight characters of the daily hash. Filter by how the request looked.

When (UTC)	Looks like	Opened	Found via	Where	Operator	Asked for	Nick
2026-10-24 05:30:38	Likely agent / tool fetch	Remote MCP api	publisher	United States (US) · ORD	none	json / empty	`21260625`
2026-10-24 02:39:36	Could be either	Skill file agent_fetch	publisher	Finland (FI) · WAW	none	wildcard / empty	`20ae0442`
2026-10-24 02:31:28	Could be either	MCP setup guide agent_fetch	publisher	United States (US) · IAD	bing	wildcard / empty	`d12dca0a`
2026-10-24 02:00:29	Likely agent / tool fetch	Remote MCP api	publisher	United States (US) · ORD	none	json / empty	`fe12bad4`
2026-10-23 11:06:13	Could be either	Skill file agent_fetch	publisher	Finland (FI) · WAW	none	wildcard / empty	`e35d60dc`
2026-10-23 08:34:51	Likely agent / tool fetch	Remote MCP api	publisher	United States (US) · ORD	none	json / empty	`a4e3584b`
2026-10-23 06:53:56	Likely agent / tool fetch	Remote MCP api	publisher	United States (US) · ORD	none	json / empty	`2405c4fd`
2026-10-23 06:52:26	Likely agent / tool fetch	Remote MCP api	publisher	United States (US) · ORD	none	json / empty	`a4e3584b`

Ploid · ploid.com · Last 24 hours

47 hoppers · 64 sends

A hopper is a daily HMAC nick, not a person. Read Path A vs B/C next — only browser-like hops can later join a buy in PostHog.

How to read this page

Hop — a 302 we issued. This is the only send we can prove.
Impression — they saw our listing. Not a hop, not a buyer.
Daily nick — HMAC(day, IP, UA). Rotates at 00:00 UTC. Not a person.
Path A / B / C — A is a human-looking click. B is a tool fetch then a later human. C is the agent as buyer. We infer A vs B/C from headers. We do not store IP or raw User-Agent.

Hops 64

302s we issued. The only send we can prove.

Daily nicks 47

HMAC(day, IP, UA). Rotates at 00:00 UTC. Not a person.

Hops / nick 1.36

Same nick hopping more than once in a UTC day.

Impressions 0

0 nicks saw an index/MCP listing. A saw, not a hop.

Do not read impressions → hops as a funnel. Most hops come from listings we do not see as a saw, so hops can be larger.

Headline totals came from the live hop counter. Ranked charts did not load in this request — refresh, or wait a few seconds and open Last 7 days.

Who they look like when they hop

0.0% of hops could be either a browser or a tool. 0.0% look like a human/browser click (Path A). 0.0% look like an agent/tool fetch (Path B or C).

Path A · 0.0%

Looks like a human / browser click

Sec-Fetch-Dest=document or a browser UA. If a person opened the hop, PostHog can later join a buy.

Path B / C · 0.0%

Looks like an agent / tool fetch

curl, python, JSON Accept, or a CORS fetch. The tool read the page. A later human buy is usually unjoinable unless they keep utm_id.

Either · 0.0%

Headers were not enough to tell

Still a real hop. We do not guess. Role is a proxy, not a person label.

How they found you

No channel tape in this window.

Channel is the listing that held the hop (utm_term). Dest is the page or file the 302 pointed at (utm_content).

Channel

No hops in this window.

Destination on your site

No hops in this window.

Can their PostHog see it?

Destination kinds did not load in this request. The hop totals above are still live.

Where the request came from

No country tape in this window.

Country

No hops in this window.

Cloudflare colo

No hops in this window.

Continent

Continent is stored on hops from 18 Sep 2026. Older rows are blank.

Network family

Network family is stored on hops from 18 Sep 2026. Older rows are blank.

What the operator declared

Most hoppers send no allowlisted User-Agent. We still classify Accept and fetch dest.

Allowlisted families only. Raw User-Agent is discarded after we pick a family.

UA family

No allowlisted operator on these hops. They still count.

Accept-Language

No hops in this window.

Agent class

No hops in this window.

How we decided

No hops in this window.

Bot score band

Bot score was not present on these hops.

Kind

No hops in this window.

How they asked for the hop

Almost no hop sent a useful Accept header.

These classified headers are the best proxy for browser vs tool. We never store the raw strings.

Accept

No hops in this window.

Fetch dest

No hops in this window.

HTTP version

No hops in this window.

TLS

TLS class is stored on hops from 18 Sep 2026.

When the hops happened

UTC send time of the 302. This is not purchase time. 7d drops days older than a week.

Hops by day

No hops in this window.

Hour of day (UTC)

Busiest hour 00:00 UTC — 0 hops

Send time of the 302, not purchase time. Darker is more hops.

Recent hops

No hop tape in this window yet.

What we capture on hopping agents

observed_atUTC time of the 302.
destWhich of your landings the hop pointed at (home, cli, docs, …).
dest_kindhtml, agent_fetch (.md/.txt/install), api, or auth_redirect.
channelHow the agent found the hop (mcp, cursor, github, publisher, …).
rolebrowser_nav vs agent_fetch vs unknown. Best proxy for human click vs tool fetch.
country_codeCloudflare country (ISO-2). Not a street address.
continentAF / AS / EU / NA / OC / SA.
coloCloudflare colo that saw the hop (SFO, AMS, …).
asn_orgCoarse network family (amazon, google, microsoft, or truncated AS org).
ua_familyAllowlisted operator: anthropic, cursor, curl, chrome, python, …
language_familyPrimary Accept-Language (en, zh, …).
accept_classWhat they asked for: html, text, json, wildcard, empty.
fetch_dest_classSec-Fetch-Dest: document = browser nav, cors/empty = usually a tool.
kindbrowser vs api, from Accept and path.
http_methodGET / HEAD on hops.
http_versionh1 / h2 / h3.
tls_versiontls12 / tls13 when Cloudflare reports it.
bot_score_bucketCloudflare bot score band. Lower = more automated.
agent_classverified_agent / declared_ai / likely_agent.
identity_tierHow we classified them (declared UA, machine endpoint, signed, …).
verified_bot / signed_agentCloudflare bot-management flags, 0 or 1.
agent_nickFirst 8 chars of the daily rotating hash. Not a person.

What we do not store

IP addressNever stored. Mixed into a daily HMAC, then dropped.
Raw User-AgentClassified to a family (cursor, curl, chrome, …), then dropped.
Query string / cookies / body / promptsNot read on hops. Hop URLs are path-only.
Buyer email, name, cardSales ingest is an opaque invoice/key/run id plus hop_id.
Stable agent identityagent_id_hash rotates every UTC day. Not shared as a person.