v1.1.0

Minor Changes

• 31a84bf: Names Cursor's in-app browser, cursor-browser, from the Cursor/<version> token in its user agent (#3). Both halves read it: the server half as a declared user-agent token, the page half from navigator.userAgent. Like the Codex in-app browser, it identifies the browser, not who acts in it: a person who browses Cursor's browser by hand is reported as cursor-browser too.

Output changes since v1.0.1

Coverage: what the request vectors and the registry pin. A changed page predicate or server rule that no vector exercises does not show here; the maintainers replay their recorded agent and person sessions before each release, which covers the page half.

No request vector changed its verdict.

New request vectors: 2.

Registry

• names: added cursor-browser
• user-agent tokens: added Cursor
• page declarations: added Cursor
• reasons: changed ua.declared-agent-token, ua.page-declared-engine

Vectors sha256: 3d82d4c9557cba16abece29f3be216e78209cc558ef9722fd4e84cf364fc8ab0 (vectors/requests.json, vectors/core.json), the same for the npm and PyPI packages of this release.

v1.0.1

Patch Changes

• 148c1a1: Package pages: a full README on PyPI, the README banner from an absolute URL, and the descriptions in the site's words. No change to any verdict.

Output changes since v1.0.0

Coverage: what the request vectors and the registry pin. A changed page predicate or server rule that no vector exercises does not show here; the maintainers replay their recorded agent and person sessions before each release, which covers the page half.

No request vector changed its verdict.

Registry

No registry change.

Vectors sha256: 96fee2eb535f9797e8c62daea8a7fde8322f45b4657ebfa78801cba782afd747 (vectors/requests.json, vectors/core.json), the same for the npm and PyPI packages of this release.

v1.0.0

Major Changes

• babd9ed: First release. Botscent tells your site when an AI agent, not a person, is browsing it, and which agent.

  • The server half reads Web Bot Auth signatures, user-agent tokens and your host's verified-bot field. It runs in TypeScript (Node.js, Cloudflare Workers, Vercel, Deno, Bun) and Python.
  • The page half finds agents inside the browser. It is about 5 KB gzipped and makes no network request.
  • Adapters for Next.js, React, Vue, Nuxt, SvelteKit, Astro, Express, Hono, Cloudflare Workers, Netlify, Vercel, FastAPI, Starlette, Django and Flask.
  • npx botscent check <url> tests an install.

Output changes

First release: 100 names, 92 user-agent tokens, 4 signers with 6 keys, and 69 request vectors.

Vectors sha256: 96fee2eb535f9797e8c62daea8a7fde8322f45b4657ebfa78801cba782afd747 (vectors/requests.json, vectors/core.json), the same for the npm and PyPI packages of this release.