Web Bot Auth (Cloudflare)

Verification notes: New listing, added this pass. Web Bot Auth is an IETF draft standard, built on HTTP Message Signatures (RFC 9421), that lets a site cryptographically verify an AI agent's identity instead of relying on spoofable user-agent strings — finalized as a referenced spec in May 2026. Cloudflare's own 'Verified AI Agent' category launched with 19 agents at rollout, reportedly covering an estimated 84% of identified AI browser traffic as of June 2026; named agents include ChatGPT Atlas, Claude in Chrome (see Claude (agentic features)), Perplexity's Comet, and Gemini's agent mode — that adoption figure comes from Cloudflare's own reporting, not an independent audit. On August 4, 2026 Cloudflare announced Cloudflare Wallets and cloudflare.pay, which will let agents hold stablecoin balances and spend within owner-set guardrails (spending caps, approved-merchant lists), building on this same identity layer. Handle reservation opened the same day, but Cloudflare's own press release states full wallet access — onramping, offramping, issuing agent-specific 'Virtual Wallets' — is not live yet ('available in the coming months'), so paymentEnabled stays false until that ships. Visa's Trusted Agent Protocol was built in collaboration with Cloudflare and explicitly aligns with Web Bot Auth. Re-checked this pass: full wallet functionality (onramp/offramp, Virtual Wallet issuance) is still not live as of early September 2026 — only handle reservation has shipped, and Cloudflare has not named a custodian, banking partner, or specific stablecoins/chains supported. paymentEnabled correctly stays false.