Head-to-head
Stytch IsAgent vs Auth0 for AI Agents
In short
Stytch IsAgent flags inbound agent traffic on a site; Auth0 for AI Agents gives identities and scoped tokens to agents a company builds, and does not police inbound bots. For a security engineer: Neither is a bot blocker; Stytch says IsAgent is not a security control. For publisher operations: Neither charges crawlers.
The sourced difference
Stytch IsAgent flags inbound agent traffic on a site; Auth0 for AI Agents gives identities and scoped tokens to agents a company builds, and does not police inbound bots. Source, read 2026-11-04.
Side by side
| Question | Stytch IsAgent | Auth0 for AI Agents |
|---|---|---|
| Tells a verified agent from a spoof | Partial Web Bot Auth signatures plus heuristic detection (user agent, TLS fingerprint, network traits) |
Not its job issues identities and scoped tokens to the customer's own agents; does not verify inbound third-party bots |
| Per-purpose policy (train, search, answer, act) | Not published per-purpose policy (checked 2026-11-04) |
Partial fine-grained permissions and authorization for RAG scoped to each agent task |
| Charging for access | Not published support (checked 2026-11-04) |
Not published support (checked 2026-11-04) |
| Lets signed commerce agents through | Not published Visa TAP or Mastercard Agent Pay support (checked 2026-11-04) |
Partial product page mentions agentic protocols for commerce and procurement; no named TAP or Agent Pay support found |
| Cost | published: IsAgent free to 10,000 calls/month; fingerprints USD 0.005 each beyond 10,000 | AI Agents add-on at 50 percent of base plan, from USD 18/month; free plan (checked 2026-11-05) |
| Reporting | Partial client hint with agent flag and identity, meant for analytics |
Partial audit trail for agent actions claimed |
| Where it runs | app: client-side SDK calling Stytch's API, plus backend Lookup API for fingerprinting | app: SDKs and tenant APIs inside the agent and its backend |
| Points, rank | 2 of 10, rank 14 | 3 of 10, rank 11 (tied) |
| Price read 2026-11-04 | IsAgent free up to 10,000 calls/month (contact Stytch above that); Device Fingerprinting USD 0.005 per fingerprint beyond 10,000 included; free tier 10,000 MAUs and AI agents. | AI Agents add-on at 50 percent of the base plan price (USD 18 a month on B2C Essentials with 500 users, USD 75 on B2B Essentials); free plan available, paid tiers by monthly active users (checked 2026-11-05) |
Verdicts by reader
- Platform engineer
- Use IsAgent on the receiving site; use Auth0 inside your own agent and backend.
- Security engineer
- Neither is a bot blocker; Stytch says IsAgent is not a security control.
- Publisher operations
- Neither charges crawlers.
What each does not do
Stytch IsAgent
- IsAgent is not a security control; its client-side result can be tampered with (Stytch changelog, 2025-08-01).
- Detection is heuristic and not 100% accurate (IsAgent FAQ).
- No crawler monetization or per-purpose crawler policy (pages read 2026-11-04).
Auth0 for AI Agents
- Does not detect, verify or block third-party crawlers or agents hitting a website; it secures agents the customer builds (product page).
- Agent Gateway for MCP and Agent as Principal are listed as shipping next, not available (product page read 2026-11-04).
More: alternatives to Stytch IsAgent, alternatives to Auth0 for AI Agents.
Sources
Last reviewed 2026-11-04