Lab transparency
AGORA tests businesses with declared, automated agents. This page explains what those agents do, how to recognise them, the rules they follow and how a site can opt out.
What AGORA's lab agents do
- Run missions a customer's agent would run: find an offering, compare options, ask about availability or policies, and start a conversion.
- Test the businesses that use AGORA, every night, within a budget the business sets. On sites that are not AGORA customers they read only public pages.
- Never complete a purchase on a third-party site without test credentials and the business's recorded consent.
- Before any mission reaches people working at a business, for example an enquiry form that staff read, the business's consent is recorded in its evidence chain.
How to recognise them
- User-Agent
AgoraLab/1.0 (+https://agora.oskar-d.com/.well-known/http-message-signatures-directory)- Signature-Agent
https://app.fondaq.ai/.well-known/http-message-signatures-directory- Signature
- Web Bot Auth, HTTP Message Signatures (RFC 9421), Ed25519 keys published at the signature agent URL
- Disclosure
This is an automated agent operated by Fondaq.
| AI system | Disclosure | Last reviewed |
|---|---|---|
| Agent Lab mission runners (browser and API runners acting as shopping agents) | inject_free_text | 2026-10-26 |
From the AI-system inventory: trust centre.
Rules they follow
- Declare their identity in the User-Agent header and sign every request with Web Bot Auth (RFC 9421).
- Honour robots.txt (RFC 9309) and Content Signals; a disallowed path or ai-input=no is skipped, never retried another way.
- Honour site terms and rate limits; never evade bot defences, solve challenges meant for people or rotate identities.
- Disclose that they are automated in every free-text message a person may read.
Opt out
To stop AGORA's lab agents from testing your site, block the user agent in robots.txt or send the form below. Opt-outs are honoured within 24 hours, usually at once.
Or add this to your robots.txt:
User-agent: AgoraLab Disallow: /
API: POST /lab-transparency/opt-out with JSON {"domain": "...", "scope": "all"}. 0 opt-out(s) on file on this host.