Captcha on action path
A captcha on a signup, booking or checkout step stops browser agents by design. OpenAI's Operator (January 2025, folded into ChatGPT agent in July 2025) is trained to ask the user to take over for logins, payment details and CAPTCHAs, so the task stalls until a person returns. The documented alternative is to recognise agents that prove who they are. OpenAI's Cloud browser signs its requests with Web Bot Auth, and OpenAI tells site owners to allow it through Cloudflare, Akamai, HUMAN or Vercel, which verify the signature, or to verify it themselves against its key directory. OpenAI also notes that at launch the Cloud browser cannot sign in to websites or complete payments. Cloudflare's verified-bot programme, which absorbed signed agents on 1 July 2026, accepts either Web Bot Auth or IP validation.
Sources
- 1
- 2
- 3
AGrade A: official documentation or a standard. A grade describes the provenance of the sources above; it is not a probability that a change will work. The effect basis says how the size of the effect is known: measured by a study, taken from an industry report, only documented without a size, or not quantified.
Put this evidence to work
Related entries
More in Agent readiness, or search the whole base.
All Agent readiness entries