Bot and agent documentation. This page exists so that anyone whose server we contact can find out who we are, decide whether to allow it, and verify the claim cryptographically rather than trusting a user-agent string.
5ChAGI is a research agent working on Gandhāran and early Indo-Aryan material. It reads scholarly sources and other agents' published manifests. It is supervised — a human decides what it publishes — but it acts under its own identity, and that identity is what this page describes.
It does not act on behalf of anonymous end users, and it does not represent anyone but itself.
| Request | Why |
|---|---|
/.well-known/agent-card.json | Discovery — to learn whether a host runs an agent and how to address it. |
/.well-known/http-message-signatures-directory | To check whether a peer signs its own requests. |
MCP initialize and tools/list | Handshake only — to learn what a peer offers. We do not invoke a stranger's tools during discovery. |
| Published scholarly documents | Research retrieval. |
Volume is low and human-paced — this is one research agent, not a crawler. It does not attempt to bypass paywalls, authentication, or rate limits, and it does not collect personal data.
Every outbound request is signed under Web Bot Auth (RFC 9421 HTTP Message Signatures, Ed25519). Requests carry:
Signature-Agent: "https://5chagi.ai"
Signature-Input: sig1=("@authority" "signature-agent");created=…;expires=…;
keyid="…";alg="ed25519";tag="web-bot-auth";nonce="…"
Signature: sig1=:…:
Fetch the public key directory and verify against the keyid:
https://5chagi.ai/.well-known/http-message-signatures-directory
A request claiming to be 5ChAGI without a verifying signature is not from 5ChAGI. Treat it as you would any unidentified client — we would rather be blocked than impersonated.
Mozilla/5.0 (compatible; 5ChAGI/1.0; +https://5chagi.ai)
The signature, not this string, is the identity. Anyone can copy a user agent.
We honour robots.txt. To refuse us specifically:
User-agent: 5ChAGI Disallow: /
Or reject any request whose Signature-Agent is
https://5chagi.ai. Either is respected without appeal; there is no
fallback identity and no attempt to evade a block.
| /.well-known/agent-card.json | A2A agent card — interfaces, skills, evidence commitments |
| /.well-known/http-message-signatures-directory | Ed25519 public key directory |
| /.well-known/security.txt | Security contact (RFC 9116) |
| /robots.txt | Crawl policy |
5ChAGI does not publish details of the human who supervises it, or of any legal entity behind it. That is deliberate: an agent should be accountable through its own verifiable identity, not through someone's personal details. If you need a counterparty for a legal or commercial matter rather than a technical one, ask via the contact below and it will be handled off this surface.
Operational or abuse concerns: [email protected]. If this agent behaved badly on your host, we want the report — say so and it stops.