Web Bot Auth: agents that sign their requests.

Web Bot Auth lets an AI agent sign every HTTP request, so a site can check who sent it. Our agent signs every request it makes.

The numbers

From our drives of 151 products, 1–24 Oct 2026. Each one links to its definition and evidence.

By AgentDrivesUpdated 24 October 2026For agents MarkdownData JSON

What it is

Web Bot Auth is an IETF draft, now draft-ietf-webbotauth-httpsig-protocol-00 (2026-09-01)¹. The agent signs each request with HTTP message signatures, tagged web-bot-auth, with a short expiry.² Its public keys sit in a directory at /.well-known/http-message-signatures-directory.²

A bot check that verifies the signature knows which operator sent the request. The site still decides what that operator may do.

Our agent signs every request it makes. How it signs, and where its keys are.

What our signed agent met

113 of 151 products put a bot check in our signed agent's way. At 19, the check let it through. At 94, a check stopped it on at least one way in.

Signed, not verified: during these drives no bot-check provider listed our agent as a verified bot, so a check could see the signature but had no verified identity to trust.

What a listing at Cloudflare changes, measured on our own site and in new drives: What changes when Cloudflare lists an AI agent.

How to accept signed agents

Turn on your vendor's signed-agent setting.
These bot-check vendors can verify Web Bot Auth: Cloudflare, HUMAN Security, Akamai Technologies, DataDome, F5³. On Cloudflare the field is cf.bot_management.signed_agent⁴. AWS WAF labels a verified request web_bot_auth:verified.⁵
Allow them where they need to start.
Sign-up, login and the page that makes an API key. Keep your rules everywhere else.³
Keep a puzzle off those pages for verified agents.
A signature doesn't solve a CAPTCHA. The bot-check guide has the settings per vendor.

Check it yourself

Open your sign-up page from a server.
A 403 or a “Just a moment” page means a check at the edge.
```
curl -s -o /dev/null -w "%{http_code}\n" https://example.com/signup
```
Run a free check.
Our agent signs its requests, so the check shows what a signed agent meets on your sign-up page. Check yours free.

Products whose bot check let our signed agent through.

19 products we drove, by name. Each row is the product's newest drive.

AirtableDatabases
- Learn: Docs with gaps: llms.txt and an MCP server.
- Access: MCP sign-in, sign-up in a browser.
- Use: 100% of the work.
- Pay: Reaches the checkout: Stopped at the $24 a month charge.
- Leave: Leaves on its own: Nothing to cancel, deletes its account.
L4Runs on its ownDriven 15 Oct 2026
Brave Search APISearch APIs
- Learn: Docs it can act on: yes: llms.txt, an OpenAPI and an MCP server.
- Access: Can't get a key: no.
- Use: Work not reached: not reached.
- Pay: Tried to pay: partly: The payment failed on the seller's side.
- Leave: Leaves on its own: yes: Nothing to cancel, deletes its account.
Can't get an API key on its ownCard required before any API key
L1Needs a personDriven 14 Oct 2026
BrevoEmail marketing
- Learn: Docs it can act on: yes: llms.txt, an OpenAPI and an MCP server.
- Access: Can't verify its account: no.
- Use: Work not reached: not reached.
- Pay: Payment not reached: not reached.
- Leave: Nothing to cancel; its account stays: yes.
Can't verify its account on its ownNo confirmation mail
L1Needs a personDriven 19 Oct 2026
CraftDocs and workspace
- Learn: Docs with gaps: llms.txt, an OpenAPI and an MCP server; no docs on signing in.
- Access: Sign-up in a browser.
- Use: 100% of the work.
- Pay: Reaches the checkout: Stopped at the €9.99 a month charge.
- Leave: Leaves on its own: Nothing to cancel, deletes its account.
L4Runs on its ownDriven 17 Oct 2026
FilloutForms
- Learn: Docs it can act on: llms.txt, an OpenAPI and an MCP server.
- Access: Sign-up in a browser.
- Use: 90% of the work.
- Pay: Reaches the checkout: Stopped at the $19 a month charge.
- Leave: Leaves on its own: Nothing to cancel, deletes its account.
L4Runs on its ownDriven 22 Oct 2026
FirebaseDatabases
- Learn: No docs it can act on.
- Access: Runs locally: Can't sign up for one.
- Use: 70% of the work.
- Pay: Payment not tried: Our agent worked without an account, so it had none to buy in.
- Leave: Leaves on its own: Nothing to cancel, made nothing to delete.
L3Does the workDriven 20 Oct 2026
IntercomCustomer support
- Learn: Docs it can act on: llms.txt, an OpenAPI and an MCP server.
- Access: MCP sign-in, sign-up in a browser.
- Use: 50% of the work.
- Pay: Reaches the checkout: Stopped at the $39 a month charge.
- Leave: Nothing to cancel; deletes its data, but the login stays.
L3Does the workDriven 20 Oct 2026
monday.comProject management
- Learn: Docs it can act on: llms.txt, an OpenAPI and an MCP server.
- Access: MCP sign-in, sign-up in a browser.
- Use: 89% of the work.
- Pay: Reaches the checkout: Stopped at the €642.60 a year charge.
- Leave: Nothing to cancel; its account stays.
L4Runs on its ownDriven 17 Oct 2026

The other 11 products

NiftyProject management
- Learn: Docs it can act on: llms.txt, an OpenAPI and an MCP server.
- Access: Sign-up by email, sign-up in a browser.
- Use: 100% of the work.
- Pay: Reaches the checkout: Stopped at the $16 a month charge.
- Leave: Leaves on its own: Nothing to cancel, deletes its account.
L4Runs on its ownDriven 20 Oct 2026
Plausible AnalyticsWeb analytics
- Learn: Docs with gaps.
- Access: Sign-up in a browser.
- Use: 62% of the work.
- Pay: Payment not reached.
- Leave: Leaves on its own: Nothing to cancel, deletes its account.
L3Does the workDriven 11 Oct 2026
PostizSocial media scheduling
- Learn: Docs it can act on: llms.txt, an OpenAPI and an MCP server.
- Access: MCP sign-in, sign-up in a browser.
- Use: Work not reached.
- Pay: Reaches the checkout: Stopped at the $29 a month charge.
- Leave: Nothing to cancel; its account stays.
L2Gets inDriven 23 Oct 2026
ShortcutProject management
- Learn: Docs it can act on: llms.txt, an OpenAPI and an MCP server.
- Access: Sign-up in a browser.
- Use: 88% of the work.
- Pay: Card checkout.
- Leave: Nothing to cancel; its account stays.
L4Runs on its ownDriven 2 Oct 2026
SignWellE-signature
- Learn: Docs it can act on: llms.txt, an OpenAPI and an MCP server.
- Access: Sign-up in a browser.
- Use: 100% of the work.
- Pay: Card checkout.
- Leave: Leaves on its own: Nothing to cancel, deletes its account.
L4Runs on its ownDriven 6 Oct 2026
Teamwork.comProject management
- Learn: Docs with gaps: partly: llms.txt and an MCP server; no getting-started page.
- Access: Can't sign up: no.
- Use: Work not reached: not reached.
- Pay: Payment not reached: not reached.
- Leave: Leaving not reached: not reached.
Can't sign up on its ownPhone number required on sign-up form
L1Needs a personDriven 17 Oct 2026
TidyCalScheduling
- Learn: Docs it can act on: llms.txt, an OpenAPI and an MCP server.
- Access: Signs up in a browser.
- Use: 60% of the work.
- Pay: Reaches the checkout: Stopped at the card form.
- Leave: Leaves on its own: Nothing to cancel, deletes its account.
L3Does the workDriven 12 Oct 2026
TwentyCRM
- Learn: Docs it can act on: llms.txt, an OpenAPI and an MCP server.
- Access: Sign-up in a browser.
- Use: 80% of the work.
- Pay: Payment not reached.
- Leave: Leaves on its own: Cancels on its own, deletes its account.
L4Runs on its ownDriven 2 Oct 2026
WebflowWebsite builders
- Learn: Docs it can act on: llms.txt, an OpenAPI and an MCP server.
- Access: Sign-up in a browser.
- Use: 0% of the work.
- Pay: Reaches the checkout: Stopped at the card form.
- Leave: Nothing to cancel; its account stays.
L2Gets inDriven 6 Oct 2026
XeroInvoicing
- Learn: Docs with gaps: partly: llms.txt and an MCP server.
- Access: Can't sign up: no.
- Use: Work not reached: not reached.
- Pay: Payment not reached: not reached.
- Leave: Leaving not reached: not reached.
Can't sign up on its ownPhone number required at sign-up
L1Needs a personDriven 17 Oct 2026
ZulipTeam chat
- Learn: Docs it can act on.
- Access: Try first, claim later, sign-up in a browser.
- Use: 100% of the work.
- Pay: Reaches the checkout: Stopped at the $8 a month charge.
- Leave: Leaves on its own: Nothing to cancel, deletes its account.
L4Runs on its ownDriven 24 Oct 2026

Check if this stops agents in your product.

Free: what an agent finds in your product, and any wall in its way.

Pages this reference cites.

As linked when it was written. ↩ goes back to where the text cites it.

1datatracker.ietf.org · Web Bot Authapi/v1/doc/document/draft-ietf-webbotauth-httpsig-protocol↩
2ietf.org · Web Bot Autharchive/id/draft-ietf-webbotauth-httpsig-protocol-00.txt↩
3docs.aws.amazon.com · Web Bot Auth in AgentCore Browserbedrock-agentcore/latest/devguide/browser-web-bot-auth.html↩
4developers.cloudflare.com · Bot Management variablesbots/reference/bot-management-variables↩
5docs.aws.amazon.com · Bot Control rule groupwaf/latest/developerguide/aws-managed-rule-groups-bot.html↩

Asked about this reference.

Does a signature let every bot in?

No. It says who sent the request. You choose which signed operators get in, and on which pages.

Is Web Bot Auth the same as signed agents?

Web Bot Auth is the way to sign. Signed agents are the operators a bot-check vendor knows and lists: the next page in this list.

Cite this

AgentDrives. “Web Bot Auth: which bot checks let signed AI agents in.” 24 October 2026. agentdrives.com/standards/web-bot-auth

Drive data is CC BY 4.0. The text as Markdown. Every fact with its evidence.

More from the drives.

Fix guideLet signed agents past your bot checkThe fix in steps, with a check you can run yourself.Read StandardSigned agentsAgents a bot-check vendor has verified, which a site can let through.Read StandardMCPA server that turns a product's actions into tools an agent can call.Read