---
name: web-bot-auth
description: Publish Web Bot Auth JWKS directory
---

# Fix: webBotAuth

**Probe:** `GET /.well-known/http-message-signatures-directory` — pass if JSON looks like JWKS (`keys` non-empty, or `kty` present). Fail is **neutral** (L5 only; not in 0–100).

```json
{
    "keys": [
        {
            "kty": "OKP",
            "crv": "Ed25519",
            "x": "<base64url public key>",
            "kid": "bot-1",
            "alg": "EdDSA"
        }
    ]
}
```

Spec: draft-meunier-http-message-signatures-directory