{
  "title": "WagerX MCP and A2A field report: September 10–18, 2026 (partial final day)",
  "schema_version": "1.0",
  "measured_at": "2026-09-18T16:50:52.019791+00:00",
  "window": {
    "start_inclusive": "2026-09-10T00:00:00Z",
    "end_exclusive": "2026-09-18T16:40:00Z",
    "timezone": "UTC",
    "complete_days": 8,
    "partial_day": "2026-09-18",
    "partial_day_end_exclusive": "2026-09-18T16:40:00Z"
  },
  "counts": {
    "discovery": 71154,
    "task_shaped": 234,
    "other": 5184,
    "total": 76572,
    "task_shaped_http_200": 234,
    "task_shaped_outcomes": {
      "rejected": 8,
      "success": 213,
      "unknown_tool": 13
    },
    "task_shaped_protocols": {
      "a2a": 196,
      "mcp": 38
    },
    "rate_limited": 48096,
    "rate_limited_overlaps_request_classes": true
  },
  "complete_days_counts": {
    "discovery": 69955,
    "task_shaped": 122,
    "other": 4709,
    "total": 74786
  },
  "partial_day_counts": {
    "discovery": 1199,
    "task_shaped": 112,
    "other": 475,
    "total": 1786
  },
  "daily": [
    {
      "day": "2026-09-10",
      "complete": true,
      "discovery": 15657,
      "other": 535,
      "task_shaped": 14,
      "total": 16206
    },
    {
      "day": "2026-09-11",
      "complete": true,
      "discovery": 3427,
      "other": 504,
      "task_shaped": 36,
      "total": 3967
    },
    {
      "day": "2026-09-12",
      "complete": true,
      "discovery": 14112,
      "other": 511,
      "task_shaped": 9,
      "total": 14632
    },
    {
      "day": "2026-09-13",
      "complete": true,
      "discovery": 24372,
      "other": 608,
      "task_shaped": 13,
      "total": 24993
    },
    {
      "day": "2026-09-14",
      "complete": true,
      "discovery": 7208,
      "other": 615,
      "task_shaped": 10,
      "total": 7833
    },
    {
      "day": "2026-09-15",
      "complete": true,
      "discovery": 1553,
      "other": 633,
      "task_shaped": 16,
      "total": 2202
    },
    {
      "day": "2026-09-16",
      "complete": true,
      "discovery": 1971,
      "other": 655,
      "task_shaped": 9,
      "total": 2635
    },
    {
      "day": "2026-09-17",
      "complete": true,
      "discovery": 1655,
      "other": 648,
      "task_shaped": 15,
      "total": 2318
    },
    {
      "day": "2026-09-18",
      "complete": false,
      "discovery": 1199,
      "other": 475,
      "task_shaped": 112,
      "total": 1786
    }
  ],
  "payment_solicitation_indicators": {
    "count": 70,
    "day": "2026-09-18",
    "scope": "A2A task-shaped requests matching BOTH case-insensitive regular expressions; an aggregate indicator, not an exhaustive scam classification or count of attackers.",
    "patterns": [
      "(attestation|grant|airdrop|migration|recovery|overpayment|bug bounty|initialization transaction|security alert|protocol.*terms)",
      "(wallet|send|transfer|eth|bitcoin|btc)"
    ],
    "known_blind_spots": [
      "Encoded messages, including the Morse-code example, can evade the text patterns.",
      "Other pretexts or wording may not match; a match alone is not independent proof of malicious intent."
    ],
    "overlaps_task_shaped": true
  },
  "live_rechecks": {
    "date": "2026-09-18",
    "approximate_time_utc": "16:00",
    "samples": 3,
    "financial_actions_executed": 0,
    "results": {
      "unrecognized_directory_lookup": 2,
      "clarification": 1
    },
    "scope": "Owner-authorised replays against the public production A2A information route; not a comprehensive security assessment and not the stored original replies.",
    "excluded_from_request_counts": 3
  },
  "definitions": {
    "request_counting": "SUM(COALESCE(request_count,1)); includes repeated discovery counters, not unique agents or people.",
    "discovery": "Methods initialize, tools/list, prompts/list, resources/list, resources/templates/list.",
    "task_shaped": "MCP methods matching tools/call:* or A2A methods exactly SendMessage, message/send, tasks/send; includes unsupported and unsolicited requests.",
    "other": "All measured requests outside discovery and task-shaped.",
    "protocol_success": "Recorded success outcome only; does not prove correct answers, fulfilled tasks, or compliance with a payment request.",
    "rate_limited": "Recorded rate_limited outcome; overlaps the discovery class, not an additional class.",
    "payment_indicators": "Both stated patterns match the same A2A task-shaped request. No raw message is published."
  },
  "methodology": {
    "source": "Read-only aggregate extraction from WagerX production gateway records.",
    "timestamp_field": "created_at (UTC)",
    "inclusion": "Records starting inside the stated half-open interval with a nonempty IP field.",
    "exclusion_rules": [
      "Case-sensitive user-agent prefix Werkzeug/.",
      "Case-sensitive user-agent prefix WagerX- AND the same label contains Verification.",
      "The exact internal user-agent label used for the three owner-authorised September 18 safety replays."
    ],
    "exclusion_limit": "Known labels do not identify or remove every possible internal test. The third exclusion is an addition to the September 1–9 release methodology.",
    "bucket_boundary": "Cutoff aligned to the closed 10-minute discovery bucket boundary. Extraction found zero selected records with completed_at at or beyond the cutoff.",
    "storage_note": "Comparable logging starts with complete UTC days on September 1, following the August 31 instrumentation expansion.",
    "comparison": "Prior release spans nine complete days; this release spans eight complete days plus 16 hours 40 minutes. Totals are not an equal-duration growth comparison. Complete-day counts and daily totals are supplied separately."
  },
  "caveats": [
    "This is one-service observational evidence, not a worldwide census, adoption rate or market-share estimate.",
    "Request shares are not conversion rates; no caller cohort is followed from discovery to task completion.",
    "Historical response text was not retained; the three live rechecks do not prove what every original request received.",
    "No wallet-transfer capability in the reviewed public information route does not establish absence of every security risk or all sensitive-data access.",
    "No countries, raw prompts, user agents, IP addresses, wallet addresses, caller identifiers or request-level records are released."
  ],
  "links": {
    "article": "/news/agentic-web-observatory-september-18-2026",
    "previous_report": "/news/http-200-is-not-agent-success-nine-days-mcp-a2a",
    "previous_dataset": "/static/data/agentic-web-september-1-9-2026.json",
    "observatory": "/agentic-web-observatory",
    "agent_gateway": "/agent-gateway"
  }
}