Permission Manifests for Web Agents

Samuele Marro , Alan Chan , Xinxing Ren , Lewis Hammond , Jesse Wright , Gurjyot Wanga , Tiziano Piccardi , Nuno Campos , Tobin South , Jialin Yu , Sunando Sengupta , Eric Sommerlade , Alex Pentland , Philip Torr , Jiaxin Pei

🏛 Institutions: Oxford , Institute for Decentralized AI , Centre for the Governance of AI , Coral Protocol , Cooperative AI Foundation , Webair , JHU , Witan Labs , Anthropic , Stanford , UT Austin
📅 Date: December 7, 2025
📑 Publisher: arXiv
💻 Env: Web
🔑 Keywords: safety agent-permissions.json permission manifest robots.txt-style governance web governance

TLDR

This paper proposes agent-permissions.json, a lightweight robots.txt-style manifest for web agents that lets site owners specify which resources and interactions are allowed, optionally pointing agents to preferred APIs. The goal is to replace blanket blocking with a lower-friction compliance mechanism for browser-based agent traffic.

Open paper Code Report issue