Skip to content

No Web Bot Auth signing directory

Web Bot Auth is a standard that lets a verified AI agent cryptographically prove its identity when it requests your content, so you can distinguish trusted agents from anonymous scrapers and treat them differently. This check found your site publishes no signing directory for it. This only matters if you want to selectively admit verified AI agents while blocking unverified scrapers; if you're not trying to make that distinction, there's no loss here. It's an early-stage standard with limited adoption so far, which makes publishing one now more of a forward-looking signal than a competitive necessity. Your developer needs about half a day, and only if this applies to your goals. Publish /.well-known/http-message-signatures-directory listing the public keys of agents you operate or choose to admit as verified. Most businesses can safely leave this until scraper traffic becomes a genuine, measurable problem.

Why this matters

This only matters if you want to selectively admit verified AI agents while blocking unverified scrapers; if you're not trying to make that distinction, there's no loss here. It's an early-stage standard with limited adoption so far, which makes publishing one now more of a forward-looking signal than a competitive necessity.

How to fix it

Your developer needs about half a day, and only if this applies to your goals. Publish /.well-known/http-message-signatures-directory listing the public keys of agents you operate or choose to admit as verified. Most businesses can safely leave this until scraper traffic becomes a genuine, measurable problem.