AxioRankZero-Trust for AI Agents

Sign in Open the console

Identity plane

Web Bot Auth (RFC 9421)

Ed25519 HTTP Message Signatures verify the AI agents that visit your site.

View coverage matrix Read the spec

Live in the gateway today.

What it answers

Who is it, cryptographically?

Web Bot Auth (RFC 9421) sits in the identity plane of the agent-interop stack. Who is it, cryptographically? AxioRank tracks it as one row in a coverage matrix that spans six planes, from discovery and identity to authorization, content permission, and commerce.

Plane

Identity

Status

live

Direction

inbound

How AxioRank handles it

Governed, not just listed.

Live in the gateway today. Inbound: when agents reach your own site or API.

Read the Web Bot Auth (RFC 9421) specification

More identity protocols

Related protocols

A2A Signed Cards (JWS)

Verify a card's JWS and flag keys not anchored to the issuer's own domain.

OAuth Server Metadata (RFC 8414)

Resolve an authorization server's metadata; score PKCE, implicit-flow, and domain-bound endpoints (verifies signed_metadata when present).

W3C Decentralized Identifiers (did:wba)

Verify an agent's decentralized identifier and control proof, the ANP identity layer.

W3C Verifiable Credentials 2.0

Verify a standalone W3C VC 2.0 (Data Integrity or JOSE proof), the credential primitive under AP2 mandates and did:wba.

Visa Trusted Agent Protocol (TAP)

Verify the RFC 9421 agent-recognition signature and parse the signed consumer/intent proofs a TAP agent presents at checkout.

All protocols

The full coverage matrix across six planes.

Govern the whole agent stack

AxioRank verifies identities and capabilities across the agent ecosystem, from discovery to commerce. See the full coverage matrix, machine-readable.

View coverage Read the docs