title: Poppy Personal Agent Protocol Discovery File Requested
id: c35827f4-a907-4b74-995b-be7068715cc7
status: experimental
description: Detects HTTP requests for /.well-known/poppy.json, the discovery document defined by the Poppy Personal Agent Protocol (Sierra/Meta, draft 0.2). A request for this file is the first observable contact of a personal AI agent (or anything impersonating one) with a business endpoint. At the current adoption stage (5 known deployments in an October 2026 scan of ~24,500 domains) almost any such request is research traffic, scanner noise, or early agent activity worth triaging.
references:
    - https://personalagentprotocol.org/docs/spec
    - https://sierra.ai/blog/introducing-personal-agent-protocol
author: Agentic Threat Lab
date: 2026-10-22
tags:
    - attack.discovery
    - attack.t1595
atlas:
    - AML.T0116
    - AML.T0132
logsource:
    category: web
detection:
    selection:
        - cs-uri|contains: '/.well-known/poppy.json'
        - c-uri|contains: '/.well-known/poppy.json'
        - uri|contains: '/.well-known/poppy.json'
        - request|contains: '/.well-known/poppy.json'
    condition: selection
falsepositives:
    - Security researchers and internet scanners (prevalent while the protocol is new)
    - Search-engine or uptime crawlers that request well-known files indiscriminately
level: informational