Remediation
The site signals support for the Web Bot Auth IETF draft (HTTP Message Signatures over a known JWKS) so well-behaved agents can prove identity.
discoverability.web_bot_authdiscoverabilityweight 1deterministic
Why it matters
The site signals support for the Web Bot Auth IETF draft (HTTP Message Signatures over a known JWKS) so well-behaved agents can prove identity.
Underlying specification: https://datatracker.ietf.org/doc/draft-meunier-web-bot-auth-architecture/
How to fix
- See the full check definition in the rubric (linked above) for the canonical reference.
- Read the underlying specification at https://datatracker.ietf.org/doc/draft-meunier-web-bot-auth-architecture/.
Hand it to your AI assistant
Paste this into Claude Code, Cursor, or any assistant with your repository open. It carries the steps, how to verify them, and the shortcuts to avoid. It is generic, though: run a scan to get one written from what your pages actually do.
Run a scan to check your site
Verify on your site
Run a scan against your domain to see whether discoverability.web_bot_auth currently passes, warns, or fails. Free, no signup; the score page is permanent and citable.