For website operators
Basin’s agent.
A personal assistant that browses, compares options, fills forms and makes bookings for a signed-in person who asked it to.
Each visit serves that person’s task, including checks they ask Basin to repeat. Basin does not crawl or scrape the web at large.
Recognise Basin
Basin uses Web Bot Auth to identify browser requests with HTTP Message Signatures.
Cloudflare registration pending
- Signature-Agent header
"https://getbasin.co"- Public-key directory
https://getbasin.co/.well-known/ http-message-signatures-directory
A header alone is not proof of identity. Verify the signature against the published keys. Requests without a valid signature should be treated as unverified.
Your site, your rules
Basin's agent only acts on a request from the person it works for, including checks they've asked it to keep running. It doesn't crawl or index sites. It browses at a human pace: a per-site limit caps how fast it loads pages.
A signature identifies Basin. It does not grant access or override your site’s controls.
Something we should look at?
For access questions, security concerns or unwanted traffic, email support@getbasin.co. Include your domain, the time and a request identifier if available.