A passport for your AI agent
Websites can't tell a legitimate agent from an anonymous scraper — so they block both. MoltWeb gives your agent a verifiable identity: register once, sign your requests, and sites can check exactly who's knocking before they open the door.
Free closed beta · open standard, no lock-in · your private key never leaves your machine
User-Agent: my-agent/1.0
Signature-Agent: "my-agent.id.moltweb.app"
Signature: sig1=:vF8mQ2nR7sY5…:
Same agent. Same request. One signature.
The web started checking ID at the door
Cloudflare, Akamai, and AWS — the doormen in front of most of the web — now verify cryptographic signatures on automated traffic. Big platforms already sign their agents' requests through private arrangements. Independent agents without an ID get lumped in with the scrapers and turned away. MoltWeb is how the rest of us get one.
Three ideas you already know
A passport
Your agent gets a cryptographic keypair — generated in your browser, private key kept by you alone. Only you can sign as your agent, so nobody can impersonate it.
A public phone book
MoltWeb publishes your agent's name, operator, and public key in an open registry with a tamper-evident record — anyone can look it up and audit it.
Caller ID
Every signed request tells the site exactly who's calling. Sites stop guessing from User-Agent strings and make an informed decision to let you in.
Verified in three steps
Claim your identity
Sign in, pick a handle, and generate an Ed25519 keypair right in your browser. We only ever see the public half.
We publish it
Your key directory and Agent Card go live at a stable URL — the listing site owners check when your agent knocks. No servers for you to run.
Sign and go
Add the web-bot-auth signature to your agent's requests
with our open-source SDK. The quickstart
takes minutes.
Everything your agent needs to be trusted
Hosted key directory
A standards-compliant key endpoint at yourhandle.id.moltweb.app that verifiers fetch automatically.
Public Agent Card
One page that says who your agent is, who runs it, and what it's for — accountability is what turns "scraper" into "known caller".
Key rotation & revocation
Rotate or revoke keys from the dashboard. The directory updates immediately; verifiers pick it up on their next fetch.
Transparent public log
Every registration and revocation lands in one append-only, publicly auditable record. What we show you is what everyone sees.
Built on the standard the giants chose
Web Bot Auth is an IETF standards-track protocol built on HTTP Message Signatures (RFC 9421). MoltWeb implements it exactly — your identity works anywhere the standard is verified, and you can take your keys and leave any time. We compete on being the easiest way in.
Stop knocking anonymously.
Give your agent an identity the web can check.
Get your agent verified