Web Bot Auth.

The draft standard that signed agents use: each request carries a signature, and the agent publishes its keys in a directory at a fixed address so a site can check them.

Also called HTTP message signatures for bots.

In our drives.

Our agent signs every request with Web Bot Auth, so a site can always tell it's us.

Our agent and its keys

From the source

“A directory served at the well-known URI registered in Section 8.1 MUST be served with media type application/http-message-signatures-directory+json.”

Web Bot Auth, checked 3 Oct 2026

See where an agent gets stuck in your product.

Free: what an agent finds on your site and any wall in its way.