repryntt · ai158z
The repryntt agent
What our agent does on the web, how to recognise it, and how to reach us.
What it is
repryntt is its owner's own AI that acts, on their own computer, with receipts. When its owner gives it a task, like comparing prices, filling a cart or looking up opening hours, it may open a web browser and do that task the way a person would. It acts for one owner at a time, on tasks that owner asked for. It does not crawl, index or harvest sites.
How to recognise it
Page loads and data requests (document, XHR and fetch, over HTTPS) from the repryntt agent's own browser are signed with Web Bot Auth (HTTP Message Signatures, RFC 9421, Ed25519):
Signature-Agent: "https://repryntt.com"- Public keys:
https://repryntt.com/.well-known/http-message-signatures-directory - Signatures cover the host and the Signature-Agent header, and expire after one minute.
- Images, stylesheets and other files are not signed.
Today the directory lists one agent key, and it is ours. A repryntt Bot someone installs on their own computer does not sign by default.
The browser also identifies itself as an automated browser. It does not hide the automation flag or claim to be a regular desktop browser.
How it behaves
- It takes no for an answer. If a site refuses it (401, 403, 429 or 503), it does not retry that page or try to get around the refusal. It tells its owner the site said no.
- It never solves challenges. CAPTCHAs and “are you human” checks are handed to its owner, a person, or the task stops.
- It never enters a card number. Card numbers are typed by the owner. It enters a password or one-time code only for its owner’s own accounts: from a login the owner saved and allowed it to use, or a code sent to the owner’s own email.
- It asks before it commits. Purchases, sending messages, deleting things and changing account settings wait for the owner’s approval.
- It browses at a person’s pace, one page at a time, not in parallel floods.
- It reports what it did, keeps a signed receipt of its actions for its owner, and cites only pages it actually loaded.
When it uses its owner's own browser
An owner can also let the agent use a tab in their own Chrome, with their own logins, through the repryntt Link extension. That traffic comes from the owner's browser and account, and the owner chose that tab and can stop it at any time. The same rules apply: no challenge solving, no card numbers, passwords and codes only for the owner's own accounts, and approval before anything that commits.
Blocking or limiting it
A site can check the agent's signature against the key directory above, and allow, rate-limit or block it by that signature. We have submitted it to Cloudflare's signed-agent program; until Cloudflare approves it, Cloudflare does not list it as a verified agent. When it's refused, it stops.
Contact
Questions, problems or abuse reports: hello@ai158z.com. We answer within 2 business days, and we can revoke a key the same day.
Operated by ai158z. Last updated 27 September 2026.