---
title: "Letting TAP and Agent Pay agents through | Agent Ready Crawlers"
description: "How to let Visa TAP and Mastercard Agent Pay agents through: check whether your CDN verifies Web Bot Auth before you write custom rules."
canonical: https://agentreadycrawlers.com/guides/let-tap-and-agent-pay-through
site: "Agent Ready Crawlers"
last_updated: 2026-11-04
date: 2026-11-04
section: "Guides"
---

# Letting TAP and Agent Pay agents through | Agent Ready Crawlers

> How to let Visa TAP and Mastercard Agent Pay agents through: check whether your CDN verifies Web Bot Auth before you write custom rules.

Source: https://agentreadycrawlers.com/guides/let-tap-and-agent-pay-through
Site: Agent Ready Crawlers
Last reviewed: 2026-11-04

# How to let Visa TAP and Mastercard Agent Pay agents through

In short

Both programmes sign agent requests with Web Bot Auth tags; check whether your CDN or bot manager verifies them before writing custom rules. Visa's Trusted Agent Protocol gives agents a cryptographic signature with timestamps that merchants verify to tell a credentialed agent from an anonymous bot. DataDome lists TAP and KYA trust-authority integrations on its pricing comparison.

Visa and Mastercard sign their agents' requests, so the question for a merchant is whether the CDN or bot manager already checks those signatures.

## In practice

1.  Ask your CDN or bot manager whether it verifies Web Bot Auth. Cloudflare says TAP and Agent Pay both use it, with the tags agent-browser-auth or agent-payer-auth, and announced managed rulesets for registered agents; the current rule name is not confirmed in its documents.
2.  Compare vendors on the question. Akamai and Visa announced a TAP integration with Akamai's edge bot protection on 2025-12-17. DataDome lists TAP and KYA integrations on its pricing comparison, which is a vendor claim.
3.  Do not write a user-agent allow rule for these agents. A user-agent string can be copied by anyone, and the point of TAP is a cryptographic signature with timestamps that a merchant verifies.
4.  If you need to test, start from Visa's reference implementation on GitHub, which has agent-registry, cdn-proxy, merchant-backend and tap-agent folders.
5.  Expect no public list. The Verification Ledger found no public operator-level registry of registered agents for either programme.

## What the sources say

-   Primary source Visa's Trusted Agent Protocol gives agents a cryptographic signature with timestamps that merchants verify to tell a credentialed agent from an anonymous bot. [Source](https://github.com/visa/trusted-agent-protocol), read 2026-11-04.
-   Primary source Cloudflare says TAP and Agent Pay both use Web Bot Auth, with tags agent-browser-auth or agent-payer-auth, and announced managed rulesets for registered agents. [Source](https://blog.cloudflare.com/secure-agentic-commerce/), read 2026-11-04.
-   Primary source Akamai and Visa announced a TAP integration with Akamai's edge bot and abuse protection on 2025-12-17. [Source](https://www.akamai.com/newsroom/press-release/akamai-and-visa-join-forces-to-secure-the-next-era-of-agentic-commerce), read 2026-11-04.
-   Vendor claim DataDome lists TAP and KYA trust-authority integrations on its pricing comparison. [Source](https://datadome.co/pricing/), read 2026-11-04.
-   Primary source Visa publishes a reference implementation on GitHub with agent-registry, cdn-proxy, merchant-backend and tap-agent folders. [Source](https://github.com/visa/trusted-agent-protocol), read 2026-11-04.

## Related

-   [Cloudflare profile](https://agentreadycrawlers.com/vendors/cloudflare/)
-   [Akamai profile](https://agentreadycrawlers.com/vendors/akamai/)
-   [DataDome profile](https://agentreadycrawlers.com/vendors/datadome/)
-   [Visa Trusted Agent Protocol](https://agentreadycrawlers.com/glossary/visa-trusted-agent-protocol/)
-   [Mastercard Agent Pay](https://agentreadycrawlers.com/glossary/mastercard-agent-pay/)
-   [Verified bot programmes compared](https://agentreadycrawlers.com/verification/programmes-compared/)

## Sources

-   [Visa Trusted Agent Protocol (GitHub)](https://github.com/visa/trusted-agent-protocol) read 2026-11-04
-   [Securing agentic commerce: helping AI Agents transact with Visa and Mastercard](https://blog.cloudflare.com/secure-agentic-commerce/) read 2026-11-04
-   [akamai.com: akamai and visa join forces to secure the next era of agentic commerce](https://www.akamai.com/newsroom/press-release/akamai-and-visa-join-forces-to-secure-the-next-era-of-agentic-commerce) read 2026-11-04
-   [datadome.co: pricing](https://datadome.co/pricing/) read 2026-11-04

Last reviewed 2026-11-04