Skip to content
Português Request access

For site operators

The EnterDone agent identifies itself — and you decide whether it gets in

EnterDone is a work system for companies: the team asks in conversation and an agent does the work. Part of that work happens in a browser — opening a supplier portal, checking a price, filling in a form a person asked for. This is the agent that visits your site. It does not disguise itself: every request it makes is signed, with a public key you can check. This page says who it is, what it does, what it never does, and how to allow or block it.

Who it is

The agent is operated by EnterDone (Brazil) on behalf of its customers. Each customer company has its own instance — a server of its own — and, inside it, one cloud computer per person: a real Chrome that the agent drives when the person asks, and that the person can take over at any time. The declared identity is always the platform’s, https://enterdone.com — never the customer’s name.

How it identifies itself

Every navigation carries the three headers of the Web Bot Auth standard (HTTP Message Signatures, RFC 9421, web-bot-auth profile):

  • Signature-Agent: "https://enterdone.com" — where the public key lives.
  • Signature-Input — what was signed (@authority, @method, @path and signature-agent itself), with created, expires (1 hour), nonce and keyid.
  • Signature — the Ed25519 signature.

Public keys are at https://enterdone.com/.well-known/http-message-signatures-directory — a JWKS whose own response is signed by each listed key; the keyid is the key’s thumbprint (RFC 7638). The machine-readable card (Signature Agent Card) is at https://enterdone.com/.well-known/signature-agent-card.json. The User-Agent is Chrome’s with the agent’s name at the end — EnterDone-Agent/1.0 (+https://enterdone.com/agente); the trustworthy identity is the signature, not the User-Agent.

What it does

  • Opens the pages a person at the company asked for: public sites, supplier portals and the company’s own systems — with the company’s credentials, kept in the company’s encrypted vault; the password never passes through the AI model.
  • Reads and fills in as a person would: one action at a time, one browser per person, no parallel requests.
  • Acts on request (a fetcher): it does not crawl the web, does not index, does not collect in bulk, and nothing it reads trains any model — the content serves only that person’s task, inside that company’s instance.

What it never does

  • It does not solve CAPTCHAs. When a challenge appears, it stops and hands control to a person.
  • It does not work around blocks. No residential proxies, no browser disguise, no identity switching. If your site answers 403 or 429, it does not retry automatically — it reports back to the person who asked.
  • It does not do what signed-agent policies forbid: credential stuffing, scalping, bulk scraping.
  • It does not hide who it is. Evasion code was removed from the product in October 2026; declaration is the identity.

How to allow — or block

Verify the signature with the directory’s keys (any RFC 9421 library will do; Cloudflare, DataDome and Akamai verifiers do it on their own once the agent is registered). To allow, permit the verified identity https://enterdone.com. To block, answer 403: the computer stays away from the site for 10 minutes and the agent reports back to the person, with no retry. A 429 is honored through Retry-After (or 60 seconds, doubling up to 15 minutes). The pace is a person’s, enforced in code: at most 30 navigations per minute and 600 per hour per site, one at a time. To close the door for good, robots.txt works too: User-agent: EnterDone-Agent followed by Disallow: / — the agent honors the group with its own name (not *, which is for crawlers).

Questions, abuse reports, or a site that would rather not receive the agent: [email protected].

Why this way

An agent that disguises itself is a problem for whoever runs the site and for whoever uses it. EnterDone chose the other path: a declared, verifiable visitor that stops when blocked. It is the path of the major agents on the market — and the only one that scales without becoming an arms race.