Implement Web Bot Auth

SkillCloud & infra

Sub-skill de agent-ready-cloudflare: Implement Web Bot Auth

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the Implement Web Bot Auth skill

What this skill tells your AI

The instructions your AI receives, as published by fabricioctelles/skills in skills/agent-ready-cloudflare/web-bot-auth/SKILL.md and read by ahel’s review.

Use Web Bot Auth so your site can identify itself when it sends bot or agent requests, per the IETF WebBotAuth WG.

Requirements

  • Publish a JWKS (JSON Web Key Set) at /.well-known/http-message-signatures-directory
  • The JWKS must contain at least one public key for signature verification
  • Sign requests sent by your bot or agent so receiving sites can verify them
  • Include Signature-Agent and Signature-Input headers on those signed requests

Cloudflare

Web Bot Auth on Cloudflare provides built-in support for verifying bot request signatures.

Validate

POST https://isitagentready.com/api/scan
Content-Type: application/json

{"url": "https://YOUR-SITE.com"}

Check that checks.botAccessControl.webBotAuth.status is "pass".

Signals

GitHub stars
77
Forks
7
Last commit
Sep 2026
Advanced
Catalog kind
skill
Gateway key
agent-ready-web-bot-auth
Source
github.com/fabricioctelles/skills