AI agents
Recognise agents, and let the ones you trust through.
Siteverify reports every agent it sees:
"agent": { "detected": true, "verified": true, "name": "chatgpt.com" }- Verified agents prove who operates them with Web Bot Auth: each request is signed (HTTP Message Signatures, Ed25519) and the keys are published at the operator's
/.well-known/http-message-signatures-directory. - Unverified agents announce themselves in their user agent or are caught by automation signals.
Policies
| Policy | Verified agents | Unverified agents |
|---|---|---|
| Let verified agents through (default) | Pass | Puzzle |
| Challenge every agent | Puzzle | Puzzle |
| Block every agent | Fail | Fail |
| Choose by name | Allow list passes, deny list fails | Puzzle |
Running an agent?
Sign requests with Web Bot Auth and publish your key directory; sites on the default policy will let you through.