Cloudflare, Google, and Mozilla are killing CAPTCHAs to let bots do the shopping

PACT (Private Access Control Tokens) functions as a digital hall pass issued once a user or agent proves they are not a digital menace. Instead of forcing visitors to solve geometry problems to prove their humanity, websites will simply recognize these tokens stored in the browser.

The standard is being built as an open protocol by Cloudflare alongside giants like Google, Mozilla, Microsoft, and Shopify. The core logic relies on anonymized validation, ensuring that while the site knows the visitor isn't a malicious script, it has no clue who the person actually is or what they were browsing five minutes ago.

Dane Knecht, the CTO of Cloudflare, frames this as a necessary evolution for an era where AI agents handle our chores. By standardizing how these agents interact with servers, the consortium aims to bypass the friction that currently keeps automated systems from buying movie tickets or ordering lunch without triggering a security meltdown. The system is designed to distinguish between "good" automated agents and the usual trash-tier scrapers.

This is essentially the internet admitting that humans are too slow to keep up with the bots, so we are now building an infrastructure specifically to help our silicon overlords shop more efficiently. The promise of privacy is sweet, but it also creates a streamlined expressway for autonomous agents to colonize the web before anyone has a chance to complain about the lack of human interaction.

Source: Cloudflare