Web Bot Authentication using HTTP Message Signatures
web-bot-auth for agents–from the creator of dotenvx
Web Bot Auth / OpenBotAuth reverse proxy for verifying RFC 9421 HTTP signatures
Open-source, framework-agnostic Node middleware for the AI-crawler economy. Bot detection, Web Bot Auth (IETF draft-meunier) verification, HTTP 402 issuance (Cloudflare crawler-price spec), and RSL 1.0 robots.txt parser/generator. Vendor-neutral; ships ad
Fastify plugin for the AI-crawler economy. One register() call wires bot detection, Web Bot Auth verification, RSL 1.0 policy enforcement, and HTTP 402 issuance into any Fastify app.
AgentLair adapter for LangChain.js — issue per-agent AATs, attach Bearer tokens to tool calls, emit audit envelopes, and sign outbound HTTP requests with RFC 9421 / Web Bot Auth.
AgentLair adapter for the OpenAI Agents SDK — issue per-agent AATs, attach Bearer tokens to tool calls, emit audit envelopes, and sign outbound HTTP requests with RFC 9421 / Web Bot Auth.
EXPERIMENTAL — Web Bot Auth verification, per-agent rules, rate limiting, and BLOCK_ALL kill-switch for WebMCP tool surfaces on Cloudflare Workers. Published to gather partner feedback; expect breaking changes; not for production traffic.
Express middleware for the AI-crawler economy. Wires @crawlertoll/core into req/res with one line. Detects AI crawlers, verifies Web Bot Auth signatures, applies RSL 1.0 policy, and issues HTTP 402 with a structured payment offer.
Next.js middleware for the AI-crawler economy. One-line install in middleware.ts. Detects AI crawlers, verifies Web Bot Auth, applies RSL 1.0 policy, and issues HTTP 402 with a structured payment offer — at the Vercel Edge.
Client library for verifying Web Bot Auth / OpenBotAuth (RFC 9421) signed HTTP requests
Octokit authentication strategy for OAuth clients
Hono middleware for the AI-crawler economy. One line wires bot detection, Web Bot Auth verification, RSL 1.0 policy, and HTTP 402 issuance into any Hono app. Runs on Cloudflare Workers, Bun, Deno, Vercel Edge, Node, and the browser — unmodified.
GitHub App authentication for JavaScript
GitHub OAuth App authentication for JavaScript
Google APIs Authentication Client Library for Node.js
Authentication for the Web.
Merchant trust verification for agentic commerce. Verify any merchant before autonomous payment. Compatible with IETF Web Bot Auth and RFC 9421.
The Telegram Bot Framework.
Ed25519 key generation and JWKS utilities for OpenBotAuth and Web Bot Auth
Telegram authentication plugin for Better Auth
A collection of utilities for better-auth
Expo module for browser-based authentication
Normalize a URL
Web Bot Authentication using HTTP Message Signatures
Validate if your JWKS directories meet web-bot-auth standards
Stealth browser automation with Web Bot Auth — CDP, WebDriver, BiDi backends