Vercel's bot verification now supports Web Bot Auth
ChatGPT operators just got faster access to your site. Vercel's new Web Bot Auth lets AI agents prove they're legitimate—no IP spoofing, no blocks.
Why it matters
Vercel shipped Web Bot Auth to distinguish legitimate AI traffic (ChatGPT operators, SEO crawlers, monitoring tools) from spoofed bots using cryptographic signatures. This matters because AI agents operating in dynamic/serverless environments can now reliably access sites without being blocked, reducing friction for enterprise AI automation while maintaining security.
The key facts
12 to knowVercel Bot Protection now supports Web Bot Auth protocol via HTTP Message Signatures
ChatGPT operator explicitly cited as verified bot using Web Bot Auth
Authentication uses public-key cryptography in signed headers
Covers dynamic/distributed bot sources (serverless, cloud environments)
IETF proposal collaboration with industry partners
Existing bot directory verified by IP, reverse DNS, now adds Web Bot Auth layer
Vercel Bot Protection now supports Web Bot Auth protocol (IETF standard)
Uses asymmetric public-key cryptography in signed HTTP headers
Works for bots in dynamic/serverless environments (no fixed IP required)
ChatGPT operator is verified bot using Web Bot Auth
Distinguishes legitimate automation (SEO crawlers, monitoring tools, AI bots) from spoofed traffic
Verification method: IP, reverse DNS, or cryptographic signature
Go to the source
Vercel Blogvercel.com
Publisher excerpt: We collaborated with industry partners to advance the IETF proposal for and supports the new protocol. Now, can use to verify traffic automation from dynamic and distributed sources.Web Bot AuthVercel's bot verification systemBot ProtectionHTTP Message Signatures Vercel maintains a comprehensive…
