Kylon Agent

Kylon Agent is the identity AI agents in Kylon use when they browse the web. Kylon is a workspace where teams work alongside AI agents. When a task needs a website, the agent opens it in a browser on its own cloud computer, always on behalf of the Kylon user who directed the task.

How Kylon Agent identifies itself

Kylon Agent signs its HTTP requests with Web Bot Auth, using HTTP Message Signatures (RFC 9421). Each signed request carries three headers:

  • Signature-Agent: "https://kylon.io"
  • Signature-Input
  • Signature
Public keys

The public keys are published at https://kylon.io/.well-known/http-message-signatures-directory. A request whose signature verifies against these keys comes from Kylon Agent.

Kylon Agent does not use a dedicated user agent string and does not publish IP ranges. Verify the signature instead.

How Kylon Agent uses page content

Kylon Agent visits pages only to complete the task a Kylon user asked for. Kylon does not use content that Kylon Agent accesses to train AI models. Because Kylon Agent's actions are initiated by a user, robots.txt rules may not apply.

For site owners

  • If your site is behind a provider that supports Web Bot Auth, such as Cloudflare, the provider can verify these signatures for you.
  • To allow or block Kylon Agent, match on the verified signature agent rather than on IP addresses or the user agent.
  • Questions or reports: hello@kylon.io