UltronAgent

Ultron Labs agent. Completes tasks on websites for Ultron Labs, such as quote requests, orders and bookings, using page content only for the task.

What it does

Completes tasks for Ultron Labs' own operations: requests quotes, places orders, makes bookings, fills in forms.
A person at Ultron Labs starts every task.
Uses page content only to complete the task at hand, and keeps only the task's own record, such as an order confirmation.

One task at a time on a site, at the pace of a person using it.

How to recognise it

Operator: Ultron Labs
User agent: Mozilla/5.0 (compatible; UltronAgent/1.0; +https://bots.51ultron.com/agent)
Name in robots.txt: UltronAgent
Signature agent: "https://agent.bots.51ultron.com"
Key directory: https://agent.bots.51ultron.com/.well-known/http-message-signatures-directory
Key ID: y6qWAJuSvoQS8PtZGy6yg97PO90PBQw4oSwaiZ1ZxY8
Category: Agent
Content use: Immediate. Content is used to answer the current request only.
Access: Direct. Run by Ultron Labs from its own infrastructure.

Every request is signed with Web Bot Auth over @authority and signature-agent, with the Ed25519 key published in the directory above. A request that names UltronAgent without a valid signature is not ours.

How it behaves

Every request carries our user agent and a Web Bot Auth signature (RFC 9421, Ed25519) that sites and Cloudflare can check against the bot's key directory.
Before visiting a site, the bot reads its robots.txt, keeps it for at most 24 hours and obeys the rules for its own name and for *, including Crawl-delay.
At most one request per second to a site. A 429 or 503 answer stops visits to that site for the time it asks, or for 10 minutes if it does not say.
No logging in, no paywall or challenge bypassing, no CAPTCHA solving.
Content is never used to train models.

Blocking it

In robots.txt:

User-agent: UltronAgent
Disallow: /

Or write to abuse@51ultron.com and we stop visiting the site.