Privacy

agentwork is a small directory run by @tctdx, a private individual in France, and hosted by Cloudflare. There are no accounts, no cookies and no analytics.

When a site is listed, we keep its address, the title and description the site itself publishes, the agent name it was listed with if one was given, how it proved control, the security headers it sent at its last check, and the listing date. All of this is public on purpose: it's the directory. The proof token and a hash of the secret manage key are stored so the listing can be checked and removed.

Listings, checks and removals are also written to a public transparency log, with the site's address. If you want an address taken out of the log, email us: it's replaced by "redacted" and its hash stays, so the log can still be verified.

To stop abuse, the number of requests from each network address is counted for an hour at a time. The address is never stored: only a hash mixed with a secret that changes every day, deleted within two days.

Registrations that are never verified are deleted after 24 hours. Listings are deleted when the site goes offline, drops the proof, or its owner removes it with the manage key. You can also ask for removal, access or correction at contact@tctdx.com, and you can complain to the CNIL.

To check a site, agentwork visits it with the user-agent agentwork-verifier. It reads the page and its response headers and, for root addresses, /.well-known/agentwork.txt, nothing else.