Portal by PermitsPros [email protected]
Agent disclosure — Web Bot Auth

One agent, openly identified.

This page is the public documentation for the automated agent operated by PermitsPros Comm Inc. It says who runs the agent, what it does on permit portals, how it proves its identity, and the rules it follows — so any portal operator can verify us instead of guessing.

Who operates this agent

OperatorPermitsPros Comm Inc
BusinessPermit expediting — we file and track building, fire, and trade permits for contractors, fire-protection companies, and property owners
In business since2008
Based inConcord, California
Responsible personSal Zahraoui, Owner
Contact[email protected] · (925) 876-7721

What the agent does

PermitsPros is a permit expediting firm. Clients — contractors, fire-protection companies, and property owners — authorize us in writing to act as their agent of record for their permit jobs. Our agent works inside city and county permit portals, in named accounts that we own and control, to do the same work a person at our desk would do:

  • Submit permit applications and upload plans and documents
  • Check application status and respond to reviewer corrections
  • Schedule inspections
  • Download approved plans, permit cards, and receipts
  • Pay permit and inspection fees on the client's behalf, inside their permit record

The agent works at human filing volumes: a small number of sessions per day per portal, during business hours, at a reasonable request rate. It does not scrape public data, does not access any account we do not own, and no one outside PermitsPros can operate it — there is no public sign-up.

How the agent identifies itself

Our requests carry Web Bot Auth HTTP Message Signatures (RFC 9421, Ed25519). Each signed request includes a Signature-Agent header pointing at this domain, and the public key used to verify the signatures is published in our key directory:

Key directoryhttps://portal.permitspros.com/.well-known/http-message-signatures-directory
Key fingerprint (keyid)2FH13rF7w9WFRBFuZSMeDrVRgJQDLlfTO6Bcu491lOE
Signature tagweb-bot-auth

The directory itself is signed with the same key (http-message-signatures-directory tag), so it cannot be mirrored or re-registered by anyone else. Keys are rotated by publishing the new key in the directory before the old one is retired.

Behavior commitments

  • Deterministic self-identification — the agent signs its requests and never disguises itself as a regular browser user.
  • Respects robots.txt and crawl directives, including crawl-delay.
  • Reasonable request rates — human-scale filing work, not bulk crawling.
  • No evasion — the agent does not work around website-owner preferences, rotate identities, or share, pool, or rotate accounts.
  • Written authorization only — the agent acts solely for clients who have authorized PermitsPros in writing as their agent of record.
  • Immediate use only — anything the agent retrieves is used to serve that client's permit job. Nothing is collected for resale or for training models.

For portal operators

If you operate a portal our agent visits and you would like to verify, allow, or restrict its access, contact us at [email protected] or (925) 876-7721. We are glad to work through your process — including delegate or authorized-agent arrangements your platform offers — and to adjust how the agent works with your site.

This disclosure is kept accurate as our infrastructure changes. If anything here ever stops matching the traffic you see from us, that is a problem on our side — tell us and we will fix it.