AgentVisa for site owners
AI agents are visiting websites every day — browsing, submitting forms, placing orders, accessing APIs. The ones with a verified human behind them are your best potential customers. The rest are noise. AgentVisa lets you tell the difference — and let the right ones straight through.
Let the right AI agents in — they are your customers
Verified agents represent real people who can transact. Every agent that carries an AgentVisa token has a biometrically authenticated human behind it — someone who can buy, subscribe, sign up, and complete actions. That is your best traffic. Let it through.
Unverified agents get redirected to get credentialed. Agents without a token are sent to agentvisa.ai/verify automatically — a notice that tells them to check with their human, get verified once, and come back ready to transact. You are not blocking customers; you are qualifying them.
Protect sensitive actions. AI agents can place orders, submit forms, access account data, and call your APIs. AgentVisa ensures a verified human authorized every one of those actions — so you know who is responsible.
No friction for human visitors or verified agents. Regular human traffic is completely unaffected. Verified AI agents pass through automatically. Only unverified agents are asked to get their credentials first.
Simple three-step protection
You don't need to understand how AI agents work. AgentVisa handles the verification automatically once it's on your site.
You add AgentVisa to your site
Drop in one script tag, or add one line of middleware to your server. Takes under ten minutes. Your developer can do it from the developer integration page.
An AI agent visits your site
AgentVisa detects the agent and checks whether it carries a verified human token — an av_xxx token issued after the human completed biometric verification.
Unverified agents are sent to AgentVisa automatically
By default, unverified agents are redirected to agentvisa.ai/verify — a notice page that tells them to check with their human, get verified once, and come back. You can override this — block them outright, show a custom message, or limit what they can do — but the redirect is the default so agents always know where to go.
Multi-factor human verification — not just an account
AgentVisa tokens are not issued to AI agents — they are issued to the real humans behind them. Every token holder has completed:
| Verified ownership of a real email address | |
| Phone | One-time code sent to a separate device via SMS or WhatsApp |
| Biometric | Face ID, Touch ID, or fingerprint — on their phone |
| Cross-check | A code from email entered on the phone — confirms both channels are under the same person's control |
Tokens are permanently revoked if shared or misused. The human must re-verify from scratch to get a new one.
What you need
A Widget Holder account
Free to create. You get an API key and a widget ID from your dashboard.
One snippet of code
A single script tag for your front end, or one middleware line for your server. Your developer handles this.
The AgentVisa badge
Drop the badge on your site to signal to agents — and users — that your site requires verification.
Will this break my site for regular human visitors?
No. AgentVisa only activates when it detects an AI agent. Human visitors using your site normally are completely unaffected.
What happens to AI agents that aren't verified?
By default they are redirected to agentvisa.ai/verify automatically — a notice that tells them to check with their human, get verified once, and come back. You can override this to block them outright, show a custom message, or restrict access rather than redirecting.
Do I need a developer to set this up?
For the front-end widget, it's one script tag — most developers can add it in minutes. For server-side protection (APIs, form submissions), your developer adds one middleware line. See the technical setup page for details.
What does it cost?
Widget Holder plans are available on our pricing page.
Can verified agents be trusted completely?
A verified agent has a real, biometrically-confirmed human behind it — but you are still in control of what that agent can do on your site. AgentVisa provides human authorization; your site enforces the rules.