auth for agents–from the creator of `dotenv` and `dotenvx`
Botscent tells your site if an AI agent, not a person, is browsing it, and which one. 5 KB, MIT, 0 deps.
Measure what a website serves to machine readers. Fetches any page as several honest identities, including a cryptographically signed agent, and reports what each one received.
Double Agent detection engine: tell humans, bots and AI agents apart, client-side. MIT.
Verified-bot identity for AI agents (Web Bot Auth / RFC 9421), with a doctor that reports why a request was blocked.
Verify and sign AI agent HTTP traffic in Python — RFC 9421 · Web Bot Auth · AAuth
Experimental open contract between websites and AI agents (Open Agent Access Gateway)
Classify web traffic from server log entries and header capture into human, AI agent, AI crawler, AI assistant, programmatic, and other bot categories. No analytics service or middleware required.
Reference implementation of the terms.txt consent and compensation protocol for agentic web access.
Open-source edge layer of Paperward — Cloudflare Worker that detects AI agent traffic via Web Bot Auth (RFC 9421) and charges per-fetch via x402 (Coinbase facilitator, USDC on Base).
Let's Encrypt for AI agents — short-lived delegated credentials humans issue to agents; sites verify statelessly.
Lint web-bot-auth key directories - expired keys, wrong curves, http message signature checks etc
Drop-in middleware that detects AI bot traffic. Community-maintained signature database + RFC 9421 Web Bot Auth verification. Node + Python + Go. Apache-2.0.
The agent-native browser: honest headful browsing for AI agents, verified identity (Web Bot Auth), semantic snapshots, strike-budget rate guards. HTTP API + CLI. Free, MIT.
Merchant-side trust gateway for AI shopping agents. One API verifies Visa Trusted Agent Protocol, Google AP2 v0.2, and IETF Web Bot Auth (real ChatGPT traffic): RFC 9421, Ed25519, SD-JWT. Live on the Shopify App Store.
Identify AI agents by Ed25519 signature (RFC 9421 / Web Bot Auth), enforce the access policies you set, meter every crossing, price agent traffic with HTTP 402, and serve a /.well-known/x402 manifest so agents can find what you sell. Humans are never charged. Hosted identity API plus zero-dependency Express middleware.
auth for agents–from the creator of `dotenv` and `dotenvx`
Open registry, scanner, and leaderboard for agent-ready websites. Scans the full agent-access stack — llms.txt, agents.txt, A2A, MCP, OpenAPI, robots.txt + Content Signals, OAuth, RSL, bot management — scores it, ranks by industry, and tells you how to become approved.
Open readers behind CrawlCheck, the verification layer for the agentic web: robots.txt policy per crawler and agent, user-agent group shadowing detection, and request verification against operators' published IP feeds.
To associate your repository with the web-bot-auth topic, visit your repo's landing page and select "manage topics."