{"id":"ia.web-bot-auth","name":"Web Bot Auth","verify":{"command":"curl -sf https://{domain}/.well-known/http-message-signatures-directory | jq -e '.keys | length > 0'","rescan":"isagentready results {domain} --checkpoint ia.web-bot-auth","expect":"exit code 0"},"fix":{"steps":[{"action":"Generate an Ed25519 key pair for your bot.","order":1,"language":null,"code_example":null},{"action":"Publish the public key as a JWKS in the signatures directory.","order":2,"language":"json","code_example":"{\n  \"keys\": [{\"kty\": \"OKP\", \"crv\": \"Ed25519\", \"x\": \"<base64url key>\"}]\n}"}],"summary":"Publish /.well-known/http-message-signatures-directory when your site operates a signing bot.","skill":{"name":"ai-content-discovery","anchor":"ia.web-bot-auth"}},"category":"training_exposure","aggregate":null,"references":[{"title":"HTTP Message Signatures directory draft","kind":"spec","url":"https://datatracker.ietf.org/doc/draft-meunier-http-message-signatures-directory/"}],"stage":"find","lifecycle":{"introduced":"2026-08-24","revised":[],"retired":null,"replaced_by":null},"methodology_version":"2026-10-22","evidence_tier":null,"evidence_source":{"title":"HTTP Message Signatures directory draft","url":"https://datatracker.ietf.org/doc/draft-meunier-http-message-signatures-directory/"},"why":"Web Bot Auth lets a bot sign its HTTP requests so that sites can verify it. A key directory at a well-known path publishes the public keys. This check reports if the directory exists.","profiles":[],"score_role":"informational","legacy_id":"te.5","i18n":{"nl":{"name":"Web Bot Auth","steps":["Genereer een Ed25519-sleutelpaar voor je bot.","Publiceer de publieke sleutel als JWKS in de signatures directory."],"why":"Met Web Bot Auth ondertekent een bot zijn HTTP-requests, zodat sites hem kunnen verifieren. Een key directory op een well-known-pad publiceert de publieke sleutels. Deze check meldt of die directory bestaat.","fix_summary":"Publiceer /.well-known/http-message-signatures-directory als je site een ondertekenende bot heeft.","verify_expect":"exitcode 0"}},"ar_practice_ids":[],"strength":null,"ar_mapping":"none","evidence_type":"recommendation","detail_url":"https://isagentready.com/en/methodology/checkpoints/ia.web-bot-auth","maturity":null,"applicability":{"mode":"always","condition":null,"surfaces":["website"]}}