Cloudflare Announces Trusted Agent Delegation Coalition and Agent Controls
Summary
Cloudflare announced the Trusted Agent Delegation coalition and customer features for identifying personal-agent traffic, setting per-agent access policies, and linking agent activity to user accounts.
Key points
- Cloudflare announced the Trusted Agent Delegation coalition to coordinate ecosystem discussions and support interoperable standards for agent delegation.
- The article describes how remotely hosted agents can obscure which users they represent, complicating fraud prevention, account abuse mitigation, compliance, and site access decisions.
- Cloudflare identifies Web Bot Auth for agent request signing and MOLE for privacy-preserving rate limiting and reputation as approaches under development.
- Cloudflare says Security Analytics now identifies personal-assistant traffic and shows agents’ request volumes, paths, and errors.
- Customers can set access policies for individual agents, including allowing or blocking them across a site or on selected pages.
- For sites using Account Abuse Protection early access, login and sign-up events show whether a personal agent made the request; Cloudflare says sites can apply a WAF rule to a user ID without blocking the shared agent for other users.
- Cloudflare describes these customer features as already in production while broader standards work continues.
Article Details
- Event Type
- Cloudflare announced the Trusted Agent Delegation coalition and new capabilities for identifying and managing AI agent traffic.
- Impact
- Cloudflare customers can view agent traffic, set access policies per agent, and, with Account Abuse Protection in early access, identify the agent associated with login and signup requests. The article presents these capabilities and work on interoperable standards as ways to improve site visibility, user attribution, and accountability when people access websites through agents.
Vendors
Products
Account Abuse ProtectionTie an Agent back to the user it acts for — and act on it. For sites using Account Abuse Protection (early access), every login and sign-up now shows whether a personal Agent made the request, and which one. When anAI Crawler and Agent access policiesSet access on your terms, per Agent. Using AI Crawler and Agent access policies, you can welcome the Agents that bring you business and restrict the ones that don't — allow an Agent across your site, block it only onBusiness Insightseach Operator crawls versus the traffic it sends back, Enterprise Bot Management customers can use Business Insights.Enterprise Bot Managementaffect your business, including how much each Operator crawls versus the traffic it sends back, Enterprise Bot Management customers can use Business Insights.Security AnalyticsSee which Agents are on your site, and what they're doing. Security Analytics now breaks out Personal Assistants as their own traffic category, and a new widget lists every Agent visiting your site, how many requests