---
title: "Web Bot Auth defined | Agent Ready Checklist"
description: "Web Bot Auth: IETF work in which a bot signs its HTTP requests and publishes public keys, so sites can verify which agent is calling."
canonical: https://agentreadychecklist.com/glossary/web-bot-auth
site: "Agent Ready Checklist"
last_updated: 2026-11-05
section: "Glossary"
---

# Web Bot Auth defined | Agent Ready Checklist

> Web Bot Auth: IETF work in which a bot signs its HTTP requests and publishes public keys, so sites can verify which agent is calling.

Source: https://agentreadychecklist.com/glossary/web-bot-auth
Site: Agent Ready Checklist
Last reviewed: 2026-11-05
Agent endpoints: https://agentreadychecklist.com/llms.txt (index), https://agentreadychecklist.com/openapi.json (API), https://agentreadychecklist.com/mcp (MCP server), https://agentreadychecklist.com/ask (search)
Access: https://agentreadychecklist.com/auth.md (no key). Pricing: https://agentreadychecklist.com/pricing.md (free).

# Web Bot Auth

IETF work in which a bot signs its HTTP requests and publishes public keys, so sites can verify which agent is calling. Keys live at a well-known JWKS path. Example: GET /.well-known/http-message-signatures-directory. Cloudflare Web Bot Auth lets a bot sign requests; sites verify with keys published at /.well-known/http-message-signatures-directory.

## Definition

IETF work in which a bot signs its HTTP requests and publishes public keys, so sites can verify which agent is calling. Keys live at a well-known JWKS path.

## Example

```text
GET /.well-known/http-message-signatures-directory
```

## Nearby terms

-   [.well-known](https://agentreadychecklist.com/glossary/well-known/)URI prefix defined in RFC 8615 for site-wide metadata at fixed paths.

## Sources

-   [isitagentready.com/.well-known/agent-skills/web-bot-auth/SKILL.md](https://isitagentready.com/.well-known/agent-skills/web-bot-auth/SKILL.md)read 2026-11-04
-   [blog.cloudflare.com/agent-readiness/](https://blog.cloudflare.com/agent-readiness/)read 2026-11-04

Last reviewed 2026-11-05. AgentReady v2.0, read 2026-11-04.