The field guide to every AI crawler and agent at the door, and the vendors who decide who gets in.
Vendors by type
Verification providers
In short
11 verification providers are profiled, from card networks such as Visa and Mastercard to identity companies such as Prove and Vouched. 3 of 11 document support for Web Bot Auth, 1 for Visa TAP and 1 for Mastercard Agent Pay.
The 11 verification providers run alphabetically from American Express to World, and carry 107 sourced facts between them.
The price models on record include add-on, 50% of the base plan price; free tier, then monthly plans; sales-led; free tier, then contact sales; per fingerprint above the included volume; and 4 more. 1 profile carries our own probes of key directories or IP files. Each profile lists what the vendor does not do next to what it does.
Card network whose ACE developer kit plans an agent registration service so only verified AI agents get tokenized Amex credentials, with Agent Purchase Protection for registered agent purchases; the registration spec is still in development.
Okta's customer identity platform; its AI Agents add-on gives agents a company builds a user-bound identity, scoped tokens, a Token Vault for third-party APIs and Cross App Access, and it verifies no inbound crawlers.
Customer and agent identity platform whose Agentic Identity Hub gives AI agents and MCP clients OAuth 2.1 access, short-lived scoped credentials and an agent directory with policies, for agents calling a company's APIs rather than crawling its site.
Card network whose Agent Pay registers AI agents and has them sign requests with Web Bot Auth under the tag Agent-pay-auth, so a merchant or its CDN can check the agent's key in a network directory before letting it buy.
Microsoft's identity service for AI agents inside an Entra tenant: each agent gets its own service principal created from a blueprint, with tokens, a human sponsor and audit, for agents an organisation runs rather than agents visiting a website.
Identity verification company whose Verified Agent product binds an AI agent to a verified person or business with identity-bound tokens, checks participants against a shared trust registry and logs co-signed consent for agent purchases.
Identity platform, part of Twilio since November 2025, that verifies Web Bot Auth signatures through its IsAgent SDK and Device Fingerprinting, and issues scoped OAuth tokens to AI agents and MCP clients through Connected Apps.
1web-bot-auth
free tier, then contact sales; per fingerprint above the included volume
Identity verification company whose Know Your Agent programme, in alpha, runs business and AML checks on the company behind an AI agent, binds the agent's fingerprint to it in a signed Digital Agent Profile and lets counterparties check it by API or MCP.
Card network whose Trusted Agent Protocol lets a merchant or its CDN verify, from RFC 9421 signatures tagged agent-browser-auth or agent-payer-auth, that a visiting agent is approved under Visa Intelligent Commerce and acting for a known consumer.
Identity verification company whose Know Your Agent suite detects AI agents on a site by behaviour, enforces allow, challenge, block or redirect rules, and ties each agent action to a verified person through signed delegations.
Proof-of-human network whose AgentKit lets a person with a verified World ID register an agent's wallet, so x402-protected sites can tell a human-backed agent from a script and limit access per unique person.