When an agent can prove it is Claude

Short summary

Web Bot Auth, an IETF-backed protocol now live at Cloudflare, lets AI agents cryptographically prove their identity per-request via signing keys published at /.well-known. ChatGPT agent, Goose, and others are already registered; Claude is not yet. Sites can verify agent identity at the edge instead of guessing from user-agent strings, enabling precise allow-rules for known agents.

• •Web Bot Auth uses cryptographic signing keys published at /.well-known to verify agent identity per-request
• •Cloudflare's signed agent program already lists ChatGPT agent, Goose, Browserbase, and Anchor Browser; Claude is pending
• •Sites should base agent access rules on the public bots directory rather than spoofable user-agent strings or IP ranges

Generated with AI, which can make mistakes.