Agent Disclosure

robots.txt let websites speak to bots. Agent Disclosure lets bots identify themselves to websites and services.

If your software is an AI agent, send this header on your requests:

Agent-Disclosure: v=1, type=ai, mode=autonomous, authority=delegated

type

ai if an AI model makes decisions in this request; automation if it's a plain script.

mode

assisted if a person is driving; supervised if a person approves at defined steps; autonomous if no person is involved per action; unknown if you can't tell.

authority

operator if you act for yourself; delegated if you act for a customer; unspecified if you don't know.

Three rules: tell the truth; never send the header to look more human than you are; never treat a missing header as proof of a human.

This works agent-to-agent too: if your agent calls another agent it found through DNS or a directory, send the header on that call.

That's it. It's voluntary, it's a claim not a proof, and services will still check your identity and permissions the way they do today. If you sign your requests with Web Bot Auth, sign this header too.

Read the paper Try it If you receive agent traffic Who sends it Full specification: coming soon