33How can a website tell that a request really comes from a specific AI agent or crawler? Explain signed requests and Web Bot Auth.▼mediumNewCloudflareGoogleOpenAI◆ premiumA user agent string is a claim anyone can type. A signature over the request is a claim only the key holder can make. The interesting part is what that signature still does not tell the site.Open full answer →
46When an AI agent buys things for users, how do payment protocols prove consent, cap spending and let merchants trust the agent?▼hardNewGoogleOpenAIStripe◆ premiumGiving an agent a card number is the wrong design. The scored answer separates consent, spending limits and agent identity, and shows how 2025-26 protocols handle each.Open full answer →