Title: AxioRank Agent Verification
Author: kamenzy
Published: <strong>July 10, 2026</strong>
Last modified: July 10, 2026

---

Search plugins

![](https://ps.w.org/axiorank-agent-verification/assets/banner-772x250.png?rev=3602714)

![](https://ps.w.org/axiorank-agent-verification/assets/icon.svg?rev=3602714)

# AxioRank Agent Verification

 By [kamenzy](https://profiles.wordpress.org/kamenzy/)

[Download](https://downloads.wordpress.org/plugin/axiorank-agent-verification.0.2.1.zip)

 * [Details](https://wordpress.org/plugins/axiorank-agent-verification/#description)
 * [Reviews](https://wordpress.org/plugins/axiorank-agent-verification/#reviews)
 *  [Installation](https://wordpress.org/plugins/axiorank-agent-verification/#installation)
 * [Development](https://wordpress.org/plugins/axiorank-agent-verification/#developers)

 [Support](https://wordpress.org/support/plugin/axiorank-agent-verification/)

## Description

AxioRank Agent Verification checks the AI agents that reach into your site. Instead
of guessing from a user-agent string, it verifies Web Bot Auth signatures (RFC 9421)
and known-agent identity through AxioRank, then lets you monitor or block on the
result.

It is built for the surface that actually reaches PHP: the REST API (/wp-json), 
admin-ajax, XML-RPC, login, search, and any request with a signature or a bot-like
user-agent. Full-page-cached visits are served before PHP loads and are not seen
by the plugin, which is expected. This protects your API and dynamic endpoints, 
not cached pages.

The plugin is a thin client. Each protected request is forwarded as one authenticated
POST to the AxioRank verify endpoint, and the verdict is applied locally. There 
is no heavy SDK and no local model.

#### What you get

 * Cryptographic verification of signed agents (Web Bot Auth), plus known-agent 
   identity.
 * Monitor mode by default: verdicts are logged in your AxioRank dashboard, nothing
   is blocked.
 * Enforce mode: apply block (403) and challenge (401) verdicts, gated by your surface
   posture.
 * Scope controls: choose which endpoints are verified.
 * Fail-open by design: if AxioRank cannot be reached, requests are allowed, so 
   a verification outage never takes your site down.

#### Requirements

An AxioRank account and a website surface site key (axr_site_…). Create one in AxioRank
under Settings, Surfaces.

## Screenshots

[⌊The settings screen: the onboarding stepper, connection status, scope controls,
and the monitor or enforce switch.⌉⌊The settings screen: the onboarding stepper,
connection status, scope controls, and the monitor or enforce switch.⌉[

The settings screen: the onboarding stepper, connection status, scope controls, 
and the monitor or enforce switch.

[⌊Connected, with the local activity panel showing verified, unverified, and spoofed
counts.⌉⌊Connected, with the local activity panel showing verified, unverified, 
and spoofed counts.⌉[

Connected, with the local activity panel showing verified, unverified, and spoofed
counts.

[⌊A successful connection test against AxioRank.⌉⌊A successful connection test against
AxioRank.⌉[

A successful connection test against AxioRank.

## Installation

 1. Install and activate the plugin.
 2. In AxioRank, register a website surface and copy its site key (axr_site_…).
 3. Open Settings, AxioRank, paste the site key, or define it in wp-config.php: define(‘
    AXIORANK_SITE_KEY’, ‘axr_site_…’ );
 4. Leave the mode on Monitor, save, and use “Test connection” to confirm.
 5. Watch the AxioRank dashboard, then switch to Enforce when you are confident.

## FAQ

### Will this block real visitors?

No. Only requests that are signed, hit an enabled sensitive endpoint, or carry a
bot-like user-agent are verified, and the plugin only blocks in Enforce mode when
AxioRank returns an enforced non-allow verdict. Logged-out human page views are 
never forwarded.

### What happens if AxioRank is unreachable?

Verification fails open. The request is allowed and the site keeps serving.

### Does it slow down my site?

The plugin skips ordinary traffic, so most requests never call out. Verified requests
add one short, capped HTTP round trip.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“AxioRank Agent Verification” is open source software. The following people have
contributed to this plugin.

Contributors

 *   [ kamenzy ](https://profiles.wordpress.org/kamenzy/)

[Translate “AxioRank Agent Verification” into your language.](https://translate.wordpress.org/projects/wp-plugins/axiorank-agent-verification)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/axiorank-agent-verification/),
check out the [SVN repository](https://plugins.svn.wordpress.org/axiorank-agent-verification/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/axiorank-agent-verification/)
by [RSS](https://plugins.trac.wordpress.org/log/axiorank-agent-verification/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 0.2.1

 * Endpoint scoping now resolves the real admin-ajax, XML-RPC, and login paths from
   WordPress instead of assuming their default locations, so sites that relocate
   wp-admin or run WordPress in a subdirectory are matched correctly.

#### 0.2.0

 * Renamed to AxioRank Agent Verification.
 * New branded admin experience: onboarding stepper, connection status, scope cards,
   guarded enforce switch, and a local activity panel.

#### 0.1.0

 * Initial release: monitor and enforce modes, scope controls, Web Bot Auth verification
   through AxioRank, fail-open transport.

## Meta

 *  Version **0.2.1**
 *  Last updated **5 hours ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 5.8 or higher **
 *  Tested up to **7.0.1**
 *  PHP version ** 7.4 or higher **
 * Tags
 * [agent](https://wordpress.org/plugins/tags/agent/)[AI](https://wordpress.org/plugins/tags/ai/)
   [bots](https://wordpress.org/plugins/tags/bots/)[security](https://wordpress.org/plugins/tags/security/)
   [verification](https://wordpress.org/plugins/tags/verification/)
 *  [Advanced View](https://wordpress.org/plugins/axiorank-agent-verification/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/axiorank-agent-verification/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/axiorank-agent-verification/reviews/)

## Contributors

 *   [ kamenzy ](https://profiles.wordpress.org/kamenzy/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/axiorank-agent-verification/)