Heedkin's browser
Last updated 18 October 2026
Heedkin is a personal assistant. When someone who uses it asks it to do something on a website, such as download a bill or check on an order, it opens the site in its own browser and does it for them. This page is for the people who run those websites.
What it does
- It acts for one signed-in person, on a task that person asked for, one page at a time.
- It never crawls or indexes sites, never collects pages to train AI models, and is never used for scraping.
- It asks the person before it submits a form, buys, books or deletes anything. Logins, codes and payments are left to them.
How it identifies itself
Every request it makes is signed with Web Bot Auth (HTTP message signatures, RFC 9421). The signatures name heedkin.com, and the public key is published at heedkin.com/.well-known/http-message-signatures-directory. A request that says it's Heedkin without a valid signature isn't from us.
What it won't do
- Solve or get round a CAPTCHA. If one appears, the person does it themselves or leaves it.
- Use proxies or disguise itself as anyone else's browser.
- Ignore robots.txt rules written for Heedkin, or visit a site that turns every automated visitor away.
Blocking or allowing it
To keep it off your site, add User-agent: Heedkin and Disallow: / to your robots.txt. Changes reach it within an hour.
Sites that check Web Bot Auth signatures, such as those behind Cloudflare, can also allow or block it by its key in their bot settings.
Contact
To ask about it or report a problem, email hello@heedkin.com. Our security contacts are in heedkin.com/.well-known/security.txt.