Drop --url param from web-bot-auth extension examples

[ulziibay-kernel]

Summary

Two cleanups to browsers/bot-detection/web-bot-auth.mdx:

1. Drop --url from both build-web-bot-auth examples (section 3 and the old section 4). --url sets the base URL for update.xml/policy templates and defaults to 127.0.0.1; pointing it at the customer's domain caused the extension to silently fail to load in browser sessions. The intended domain is already covered by --signature-agent.

2. Replace the "Kernel Search configuration" section with a short pointer to /docs/bots. Kernel's own Web Bot Auth identities (Kernel Agent, Kernel Search) are already approved by Cloudflare, Vercel, Akamai, and other bot-verification providers, so the build/HOST_PROXY steps shouldn't be exposed here. The new section tells readers to contact support if they want to sign with Kernel's identities and links to the bots page for the identity list.

Why

Reported via a customer ticket where the web bot auth extension was silently failing to load — caused by the --url example pointing at the customer's domain.

---

Note

Low Risk
Documentation-only changes to example CLI flags and internal Kernel identity instructions; no runtime or security behavior changes.

Overview
Fixes Web Bot Auth docs so build-web-bot-auth examples no longer include --url https://yourdomain.com. That flag targets update.xml/policy templates (defaults to 127.0.0.1); using the customer domain could make the extension fail to load in sessions, while identity is already set via --signature-agent.

Replaces the long Kernel Search build and HOST_PROXY walkthrough with Using Kernel's bot identities: Kernel-managed identities are already on major bot directories, readers should contact support to sign with them, and identity/key-directory details live on /bots.

^{Reviewed by Cursor Bugbot for commit ed5fb28. Bugbot is set up for automated code reviews on this repo. Configure here.}

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
Kernel	🟢 Ready	View Preview	Aug 17, 2026, 10:18 PM

💡 Tip: Enable Workflows to automatically generate PRs for you.

[cursor]

Stale comment

Risk Assessment: Very Low

Verdict: Very Low risk. Already approved on caac065 — not re-approving.

What changed

Single documentation file: browsers/bot-detection/web-bot-auth.mdx (+6 / −33).

• Removes --url from the build-web-bot-auth CLI example.
• Replaces the previous Kernel Search configuration section (CLI example + HOST_PROXY_* env vars) with a short pointer to the bots page and support.

Why this is Very Low

• Documentation-only MDX on a Mintlify docs site. No application code, APIs, auth, billing, or infrastructure.
• Small, isolated surface: one page, no shared libraries or production logic.
• No CODEOWNERS file in the repo, so code-owner review is not required.
• Same HEAD as the existing approval (caac065). Risk has not increased, so approval stands.

No production behavior, schema, or security model is modified by this diff.

Note (does not change risk): CI broken-links failed because [Bots and agents](/docs/bots) is not a valid Mintlify path. Elsewhere this site uses /bots (see changelog.mdx).

  

_{Sent by Cursor Automation: Assign PR reviewers}

[cursor]

Risk Assessment: Very Low

Verdict: Very Low risk. Already approved — not re-approving. Risk has not increased after the latest push.

What changed

Single documentation file: browsers/bot-detection/web-bot-auth.mdx (+6 / −33).

• Removes --url from the build-web-bot-auth CLI example.
• Replaces the previous Kernel Search configuration section (CLI example + HOST_PROXY_* env vars) with a short pointer to /bots and support.
• Latest commit (ed5fb28) only changes the bots link from /docs/bots to /bots.

Why this is Very Low

• Documentation-only MDX on a Mintlify docs site. No application code, APIs, auth, billing, or infrastructure.
• Small, isolated surface: one page, no shared libraries or production logic.
• No CODEOWNERS file in the repo, so code-owner review is not required.
• Compared with the prior approval on caac065, the new commit is a path-only link fix. Blast radius is unchanged (or slightly reduced).

No production behavior, schema, or security model is modified by this diff. Existing approval stands.

  

_{Sent by Cursor Automation: Assign PR reviewers}