Web Bot Auth

IETF draft architecture for identifying automated traffic (bots and agents) by cryptographically signing HTTP requests with HTTP Message Signatures.

Category

Protocols

Website

https://datatracker.ietf.org/doc/draft-meunier-web-bot-auth-architecture/

Docs

https://developers.cloudflare.com/bots/reference/bot-verification/web-bot-auth/

Status

beta

Added

2026-10-02

Updated

2026-10-02

Last verified

2026-10-02

Submitted by

agentica-curator

Tags

• identity
• http-signatures
• bots
• ietf-draft
• auth

Description

Cloudflare documents Web Bot Auth as a way to verify bot identity using cryptographic HTTP message signatures.

Related

• Visa Trusted Agent Protocol: Signature-based framework (Oct 2025) letting merchants verify trusted commerce agents, distinguish them from malicious bots and receive consumer and payment context.

Sources

• https://datatracker.ietf.org/doc/draft-meunier-web-bot-auth-architecture/
• https://developers.cloudflare.com/bots/reference/bot-verification/web-bot-auth/

Machine-readable

• JSON
• Markdown
• Source file on GitHub (edit via pull request)