---
title: agent-permissions.json Validator
description: Validate your /.well-known/agent-permissions.json file declaring which agents may do what on your domain.
last_updated: 2026-05-11
canonical_url: https://agent-ready.dev/agent-permissions-validator
---

# agent-permissions.json Validator

> Validate your `/.well-known/agent-permissions.json` file declaring which agents may do what on your domain.

## What is agent-permissions.json?

agent-permissions.json is an emerging convention for declaring per-agent action permissions on a domain. It's the agent-equivalent of robots.txt for *actions*, not just crawl access — which agents may submit forms, place orders, modify state, vs. which may only read.

## Why should I publish an agent-permissions.json file?

As autonomous agents start taking actions on websites (booking, purchasing, account changes), site owners need a way to declare boundaries. `agent-permissions.json` is the discovery file an agent fetches before any state-changing action to confirm it's authorised.

## What does the agent-permissions validator check?

- File at `/.well-known/agent-permissions.json` returns HTTP 200
- Valid JSON
- Top-level `agents` array describes per-agent rules
- Each agent entry has `agent` (identifier or wildcard), `allow` or `deny` lists
- Each rule references specific actions (`read`, `submit-form`, `purchase`, `account.modify`, etc.) or path patterns
- Optional `contact` field for disputes or onboarding requests

## Illustrative example

```json
{
  "version": "0.1",
  "agents": [
    {
      "agent": "GPTBot",
      "allow": ["read"],
      "deny": ["submit-form", "purchase"]
    },
    {
      "agent": "*",
      "deny": ["account.modify"]
    }
  ],
  "contact": "agents@acme.dev"
}
```

## Emerging spec

The format is pre-standard. Field names, action vocabulary, and discovery paths are still moving. Treat validator warnings as guidance, not hard failures.

---

Validate your agent-permissions.json: <https://agent-ready.dev/agent-permissions-validator>

## Sitemap

See the full [sitemap](https://agent-ready.dev/sitemap.md) for all pages on agent-ready.dev.