Cloudflare Web Bot Auth

Cryptographically signed agent requests plus a verified bots directory, so sites allow known agents instead of blocking everything

Interfaces

1/5 verified

Verified means we fetched it and it answered. Claimed means it is listed but has not been reached yet.

Related services
Stytch Connected Apps and M2M auth — treat each agent as its own OAuth client, and stand up OAuth-compliant MCP servers	5/5
WorkOS AuthKit, Connect, and MCP auth — OAuth flows, scoped tokens, and bot detection for agent access	5/5
Unkey API key issuance, per-key rate limits, and usage analytics for machine-to-machine access	5/5
Okta Cross App Access Identity-layer protocol (XAA) giving enterprises visibility and policy control over which apps an agent may reach	4/5
Descope Agentic Identity Identity and access control for agents and MCP servers, including inbound and outbound token exchange	4/5
Auth0 for GenAI Token vault, async user approval, and Cross App Access for agents calling third-party APIs	4/5