Agent readiness check
The site signs its own bots (Web Bot Auth)
/.well-known/http-message-signatures-directory publishes the keys the site's own bots sign their requests with.
info severityagents.web-bot-authInformation only, never scored
Run this check on your site
Runs just this check in quick mode. The report opens with the evidence and the fix.
Why it matters
Only a site that operates crawlers or agents needs this: signed requests let other sites verify the bot instead of trusting its user agent. Reported, never scored.
How to fix it
If you run a bot, sign its requests with HTTP Message Signatures and publish the key directory at /.well-known/http-message-signatures-directory.
The details
- Category
- Agent readiness
- Severity of a failure
- info
- Confidence
- high
- Needs a browser
- No
- Check id
- agents.web-bot-auth