# What is Web Bot Auth?

> Web Bot Auth is a proposed standard that lets AI agents and bots sign their web requests cryptographically, so websites can tell a real agent from an impostor.

_UK and US · Updated 2026-10-27 · Akkrev, https://akkrev.com/glossary/web-bot-auth/_

**Web Bot Auth** is a way for bots and [AI agents](https://akkrev.com/glossary/ai-agent/) to prove who they are. Each request carries a cryptographic signature tied to the agent's operator, which a website or its security provider can check. Anyone can fake a user-agent name; they can't fake the signature.

The IETF published its first working group draft in September 2026. Major agents including Claude, ChatGPT and Perplexity already sign their requests, and big CDNs verify them.

## Why hotels should know about it

Many hotel websites sit behind [bot management](https://akkrev.com/glossary/bot-management/) that challenges or blocks anything automated. That stops scrapers, but it also stops guests' agents. Signed agents give security tools a reliable way to tell "a real guest's agent trying to book" from "a scraper copying our rates".

Whether a hotel's website lets verified agents through usually depends on settings at its host or CDN, which many hotels have never looked at.

## Why it matters for AI visibility

Web Bot Auth lets trusted bots and agents identify themselves, which makes it easier to let good AI traffic in.

---

Akkrev gets hotels, restaurants and cafés recommended by AI assistants. Get started: https://akkrev.com/start/