Quickstart

This page gets Double Agent running on your site in about five minutes, and then points you to the right next page for what you want to do.

Double Agent tells you who is on your site or calling your public agent: a person, a bot or an AI agent. For agents it also tells you which one, who runs it, who it is acting for and what it is trying to do. It works on any kind of site. There are two ways in: a script tag on your website, and a small recorder for your MCP server or A2A agent. Double Agent only labels and verifies. It never blocks anyone, and you decide what to do with the labels.

Add the script

Using a coding agent like Claude Code, Cursor or Codex? Add the Agent Skill and ask it to "Install Double Agent on this site":

npx skills add doubleagent-so/skills

To do it yourself, paste these two lines in the <head> of every page, before your other scripts. You don't need an account or a key to start.

<script>window.doubleagent=window.doubleagent||{q:[],push(){this.q.push(arguments)}};</script>
<script async src="https://cdn.doubleagent.so/v1/doubleagent.js" data-profile="auto"></script>

On a hosted platform or a framework, use your stack page for the exact place to paste it. The CLI can also make the edit for you: npx @doubleagent-so/cli init.

Check it worked

Open your site, open the browser console and run:

await doubleagent.ready();
// { class: 'human', probability: { human: 0.97, bot: 0.02, agent: 0.01 }, recommendation: 'allow', reasons: [ … ], … }

You should see class: 'human' for yourself. The Verdict page explains every field. Analytics and ad tools already on the page (GA4, GTM, Meta Pixel and others) get the same labels on their own, with no extra setup.

See your data

Without an account, every session still gets a verdict in the browser, and Double Agent keeps your site's data for 30 days: totals, plus up to 1,000 sessions that were not clearly human. To see it, claim your domain: sign up free, add your site and prove you own the domain. Everything collected since the install comes with it.

If you want signed tokens for your server, live presence or webhooks, you need a public key. Capabilities shows what each tier gets.

Pick your path

The detection engine is open source: Agent Detector.