AgentGate

AgentGate lets people through invisibly, admits AI agents that sign their requests, and challenges undeclared automation. A browser check and server verification, plus a WAF-style policy gateway. Self-host one binary or join the hosted pilot.

• Browser check: An invisible check that the page really ran in a browser. People see a prompt only when something looks off.
• Server verification: Redeem each token once on your backend with POST /v1/siteverify.
• Gateway: Check requests before they reach your app, with nginx auth_request or middleware.
• Rules: WAF-style ordered rules over labels, IP sets, ASN, headers and rates, plus managed rule groups.
• Threat intelligence: ASN and country, cloud ranges, Tor exits, verified crawlers and decaying IP reputation.
• Signed agents: Verify Web Bot Auth signatures and give each agent its own lane and rate limits.
• Agent policy: Per-agent actions and quotas, 402 pricing signals and a handoff to a person.
• Dashboard: Every decision with its labels, matched rule, scores and model version.
• Customer console: Add sites, copy keys and snippets, check the install, then switch from monitor to enforce.
• Self-hosting: One static binary with an embedded SQLite store, on your own server.