mlsanityData to 14 Oct 2026

terms.txt: A Consent and Compensation Protocol for Agentic Web Access

arXiv 2609.11152 ↗First posted 10 Sep 2026cs.NI cs.AI cs.CRcited by 1

On the map: LLM agents and tool use → Web, search, and research agents

Abstract (arXiv)

The open web ran on an unwritten bargain: sites admitted crawlers, and search engines sent visitors back. Public measurements show that bargain breaking under AI crawlers and agents. Automated clients now make up most requests, training dominates Cloudflare-classified crawling, and the largest AI platforms fetch thousands of pages for each visitor they return. The web's common control, robots.txt, cannot express identity, purpose, terms, or price, can be circumvented, and newer alternatives are largely proprietary CDN features. We specify terms.txt, a robots.txt-style file for per-path, per-purpose machine-access terms, plus an origin-enforced exchange using Web Bot Auth signatures, signed intent, delegation tokens, HTTP 402 negotiation, and signed receipts. We define what the exchange can enforce, audit, and leave to contract. A dependency-free implementation adds 0.20 to 0.65 ms per request on one vCPU.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Web, search, and research agents, one of 16 directions in LLM agents and tool use. Builds on 2 of its 19 references that are in the map. First posted on arXiv 10 Sep 2026.

Builds on

2 of 19 references.

References · 2

  1. 2024Consent in Crisis: The Rapid Decline of the AI Data Commonscited by 46
  2. 2025ai.txt: A Domain-Specific Language for Guiding AI Interactions with the Internetcited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2025Permission Manifests for Web Agents
  2. 2026The Agentic Web Requires New Normative Infrastructure
  3. 2026Hardening x402: PII-Safe Agentic Payments via Pre-Execution Metadata Filtering
  4. 2026Webhell: A Unified Interface for Agentic Web Access
  5. 2026From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directions
  6. 2026SPILLage: Agentic Oversharing on the Web
  7. 2026Indirect Prompt Injection in the Wild: An Empirical Study of Prevalence, Techniques, and Objectives
  8. 2026Access Controlled Website Interaction for Agentic AI with Delegated Critical Tasks