Installs into .claude/skills of the current project.
Are you the author of Web Bot Auth?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/fabricioctelles-web-bot-auth)
---
name: agent-ready-web-bot-auth
description: >
Sub-skill de agent-ready-cloudflare: Implement Web Bot Auth
---
# Implement Web Bot Auth
Use Web Bot Auth so your site can identify itself when it sends bot or agent requests, per the
[IETF WebBotAuth WG](https://datatracker.ietf.org/wg/webbotauth/about/).
## Requirements
- Publish a JWKS (JSON Web Key Set) at `/.well-known/http-message-signatures-directory`
- The JWKS must contain at least one public key for signature verification
- Sign requests sent by your bot or agent so receiving sites can verify them
- Include `Signature-Agent` and `Signature-Input` headers on those signed requests
## Cloudflare
[Web Bot Auth on Cloudflare](https://developers.cloudflare.com/bots/reference/bot-verification/web-bot-auth/)
provides built-in support for verifying bot request signatures.
## Validate
```
POST https://isitagentready.com/api/scan
Content-Type: application/json
{"url": "https://YOUR-SITE.com"}
```
Check that `checks.botAccessControl.webBotAuth.status` is `"pass"`.
