auth for agents–from the creator of `dotenv` and `dotenvx`
Botscent tells your site if an AI agent, not a person, is browsing it, and which one. 5 KB, MIT, 0 deps.
Measure what a website serves to machine readers. Fetches any page as several honest identities, including a cryptographically signed agent, and reports what each one received.
Double Agent detection engine: tell humans, bots and AI agents apart, client-side. MIT.
Verified-bot identity for AI agents (Web Bot Auth / RFC 9421), with a doctor that reports why a request was blocked.
Verify and sign AI agent HTTP traffic in Python — RFC 9421 · Web Bot Auth · AAuth
Classify web traffic from server log entries and header capture into human, AI agent, AI crawler, AI assistant, programmatic, and other bot categories. No analytics service or middleware required.
acurl, cURL for Agent
Reference implementation of the terms.txt consent and compensation protocol for agentic web access.
Experimental open contract between websites and AI agents (Open Agent Access Gateway)
Open-source edge layer of Paperward — Cloudflare Worker that detects AI agent traffic via Web Bot Auth (RFC 9421) and charges per-fetch via x402 (Coinbase facilitator, USDC on Base).
Lint web-bot-auth key directories - expired keys, wrong curves, http message signature checks etc
The agent-native browser: honest headful browsing for AI agents, verified identity (Web Bot Auth), semantic snapshots, strike-budget rate guards. HTTP API + CLI. Free, MIT.
Merchant-side trust gateway for AI shopping agents. One API verifies Visa Trusted Agent Protocol, Google AP2 v0.2, and IETF Web Bot Auth (real ChatGPT traffic): RFC 9421, Ed25519, SD-JWT. Live on the Shopify App Store.
Drop-in middleware that detects AI bot traffic. Community-maintained signature database + RFC 9421 Web Bot Auth verification. Node + Python + Go. Apache-2.0.
Let's Encrypt for AI agents — short-lived delegated credentials humans issue to agents; sites verify statelessly.
See what AI agents do in your Magento 2 store: MCP, UCP and WebMCP calls, AI crawler visits, agent-built orders, bot IP checks and plain-language findings. No IP addresses stored.
Identify AI agents by Ed25519 signature (RFC 9421 / Web Bot Auth), enforce the access policies you set, meter every crossing, price agent traffic with HTTP 402, and serve a /.well-known/x402 manifest so agents can find what you sell. Humans are never charged. Hosted identity API plus zero-dependency Express middleware.
An agent-aware gateway framework for the age of AI bots. Sort verified agents from hostile ones, trap the suspicious in a decoy, and learn from every attack — with evidence, not guesses.
To associate your repository with the web-bot-auth topic, visit your repo's landing page and select "manage topics."