DEDUPED Hot AI repos, turned into use cases Get the Monday 5

How to let only verified AI agents through with Botscent

Use Web Bot Auth verification so access decisions rely on signed requests, not names.

Short answer: Install the server half for your framework, such as import { botscent } from 'botscent/express' followed by app.use(botscent()); then in the handler, read the request's own verdict with await inspect(request) from botscent/server; Gate access with isVerified(own, 'chatgpt') for one named agent, or isVerified(own) for any verified agent. All steps.

Authorization notice. Botscent is dual-use. Only use it on software, sites and systems you own or have explicit permission to test.

Credentials. isVerified authenticates the operator's server, not the person or model in the session, and a captured signature can be replayed to the same host until it expires.

Who it is forA site owner who wants to block unknown AI agents or give a named agent extra access, such as a higher rate limit.

The problemA user-agent string or declared name is easy to fake, so blocking or allowing by name is unreliable.

The outcomeRequest handlers that allow access only when the request's own verdict passes isVerified for the agent you choose.

What you need first

  • A site built with a supported framework such as Next.js, Express, Django or FastAPI
  • npm for the TypeScript package or pip for the Python package
  • Permission to edit your site's server code and page layout
  • A running site URL to test against

Steps

  1. Install the server half for your framework, such as import { botscent } from 'botscent/express' followed by app.use(botscent()).
  2. In the handler, read the request's own verdict with await inspect(request) from botscent/server.
  3. Gate access with isVerified(own, 'chatgpt') for one named agent, or isVerified(own) for any verified agent.
  4. Do not gate on agent_name, reasons or page reports, because those can be forged.
  5. Run npx botscent check https://your-site.example/ and confirm the server half reports pass.

Prompt for your agent

Using the botscent repo (nalinbhardwaj/botscent), gate <route path> so only requests where isVerified(own, '<agent name>') is true get through. Expected output: verified requests pass and unsigned requests are refused. Verify with `npx botscent check https://<your-site>/` that the server half reports pass.

Caveat. Named verification only works for agents whose keys are bundled in the installed release, so check the release before relying on a specific agent.

Use this in your AI agent

Ask your agent

Using the Deduped MCP, get the setup steps for nalinbhardwaj/botscent and "Let only verified AI agents through"

Add Deduped to Claude Code once

claude mcp add --transport http deduped https://dedupedai.com/mcp

Cursor, ChatGPT, others

Share: X LinkedIn Hacker News Email Copy link

Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer