web-agent-bridge
Health Warn
- License — License: NOASSERTION
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Low visibility — Only 5 GitHub stars
Code Warn
- process.env — Environment variable access in abo/00-api-gateway/gateway/gateway-server.js
- network request — Outbound network request in abo/00-api-gateway/gateway/gateway-server.js
- network request — Outbound network request in abo/00-api-gateway/tests/test-gateway.js
- process.env — Environment variable access in abo/01-agent-firewall/backend/server.js
Permissions Pass
- Permissions — No dangerous permissions requested
This tool provides a standardized API and protocol bridge between AI agents and websites. It allows developers to define how AI interacts with their web properties without relying on DOM parsing or fragile web scraping.
Security Assessment
Overall Risk: Medium. The tool does not request explicitly dangerous system permissions and no hardcoded secrets were detected. However, it does make outbound network requests and accesses environment variables to handle sensitive configuration. Given the tool's ambitious claims regarding DNS discovery, firewall management, and acting as a unified API gateway, the relatively small codebase deserves a careful manual code review. You should verify exactly what data is being transmitted over those network requests before deploying it in a production environment.
Quality Assessment
The project appears to be actively maintained, with its most recent code push happening today. However, it has extremely low community visibility, evidenced by only 5 GitHub stars, meaning very few developers have tested or vetted the code. Additionally, the repository uses a NOASSERTION license. While the documentation claims an "Open Core" model, the lack of a formally recognized open-source license means the exact legal terms for usage, modification, and distribution are unclear.
Verdict
Use with caution. The concept is useful and actively updated, but the low community adoption, ambiguous licensing, and gateway network activity mean you should review the source code thoroughly before integrating it into sensitive environments.
Open AI<->Web protocol & agent platform: standardized command interface, sovereign browser, phone shield, DNS discovery, agent mesh, and unified API gateway for safe AI-website interaction.
Web Agent Bridge (WAB)
The Open AI ↔ Web Protocol & Agent Platform
robots.txt told bots what NOT to do. WAB tells AI agents what they CAN do.
Website · Documentation · DNS Discovery · العربية
Why WAB?
Currently, AI agents interact with the web by parsing the DOM, guessing selectors, or relying on fragile visual models. This is slow, error-prone, and breaks whenever a site's layout changes.
WAB solves this by providing a standardized API for the web. It creates a secure bridge between AI agents and websites, allowing agents to discover capabilities, execute commands, and interact with sites accurately — no DOM parsing, no scraping, no guesswork.
For Website Owners 🏢
Control exactly how AI interacts with your site. Expose specific capabilities, set rate limits, and monitor agent activity.
For AI Developers 🤖
Build reliable agents that work instantly on any WAB-enabled site. Stop writing custom scrapers and start using the window.AICommands standardized interface.
⚡ Quick Start
1. The Easiest Way: DNS Discovery (No Code)
Make your website instantly discoverable by AI agents by adding a single DNS TXT record. No code changes required.
_wab.yourdomain.com TXT "v=wab1; endpoint=https://yourdomain.com/.well-known/wab.json"
👉 Watch the 40-second setup video & full guide
2. The Developer Way: Install via npm
npm install web-agent-bridge
import { initWAB } from 'web-agent-bridge';
initWAB({
siteId: 'your-site-id',
capabilities: ['browse', 'api', 'commerce'],
});
✨ Core Features
🔍 DNS Discovery Protocol
The fastest way to make your site AI-ready. AI agents can find your capabilities document via DNS over HTTPS (DoH) without any initial HTTP request.
🛡️ Sovereign Shield & Firewall
Protect your site from malicious bots while allowing verified AI agents. Includes IP rate-limiting, Intent Engine, and Human-Gate rollback.
💻 Agent OS & Workspace
A premium 4-panel workspace for non-technical users featuring an embedded browser, smart agent chat, real-time negotiation monitor, and results panel.
🌐 Universal Agent Mode
Works on any website, even those without the WAB script installed, using our advanced fallback heuristics.
🗣️ Multilingual Support
Full Arabic and English interface with auto-detection. The smart agent understands and responds in any language the user writes in.
🏗️ Architecture & Open Core Model
WAB uses an Open Core dual-license model to ensure the protocol remains free while supporting sustainable development.
| Component | License | Description |
|---|---|---|
| Core SDK & Protocol | MIT | The fundamental building blocks, discovery protocol, and SDKs. |
| WordPress Plugin | GPL-2.0 | Full integration for WordPress sites. |
| Engines (Firewall, Price, etc.) | Proprietary (Free) | Advanced detection, scoring, and protection engines. |
| API Gateway & Pro Modules | Commercial | Enterprise features, data marketplace, and advanced SLA. |
🤝 Contributing
We welcome contributions from the community! Whether it's fixing a bug, improving documentation, or proposing a new feature.
- Fork the repository
- Create your feature branch (
git checkout -b feature/AmazingFeature) - Commit your changes (
git commit -m 'Add some AmazingFeature') - Push to the branch (
git push origin feature/AmazingFeature) - Open a Pull Request
📄 License
This project is licensed under the terms described in the LICENSE file. The core protocol and SDKs are MIT licensed.
Reviews (0)
Sign in to leave a review.
Leave a reviewNo results found