Research & technology

Research & technology

How AI crawlers read your site: GPTBot, ClaudeBot, PerplexityBot and robots.txt

How AI crawlers read your site: GPTBot, ClaudeBot, PerplexityBot and robots.txt

AI crawlers explained: what they are, every major bot in 2026, how to block or allow them, and how to get cited, not just crawled, by AI answers.

AI crawlers explained: what they are, every major bot in 2026, how to block or allow them, and how to get cited, not just crawled, by AI answers.

Gyrify

Gyrify

gyrifyRESEARCH & TECHNOLOGYWhich AIcrawlers shouldyou allow?The AI marketing engine for lean teams

Most guides treat AI crawler management as a defensive task: find the bots, write a Disallow rule, move on. That framing misses the real opportunity. The right question is not just who to block — it is which crawlers you want citing you, and whether your content is structured to earn that citation when an AI system decides what to quote.

What AI crawlers are (the direct answer)

An AI crawler is a bot that fetches web pages either to collect training data or to retrieve live sources for an AI-generated answer. That single sentence contains a fork that changes every decision that follows.

Training crawlers, GPTBot, ClaudeBot, Google-Extended; gather content that may enter future model datasets. Blocking them keeps your material out of future training runs. It does not erase content already incorporated into existing models, and it does not affect whether a live AI system cites you today.

Agent crawlers — ChatGPT-User, Claude-User, and Perplexity's retrieval agents — fetch pages in real time to support a user's current question. Block these, and your page disappears as a potential citation source the moment a user asks something you could have answered. A coffee brand that blocks all AI bots through a security preset may inadvertently prevent ChatGPT from surfacing its product pages when a user asks "where can I buy specialty coffee beans online in Australia" — a high-intent query with direct commercial value.

Most coverage collapses both types into one category and recommends a uniform block or allow policy. That is the foundational mistake. A smart crawl strategy separates them: restrict training access where content rights or competitive sensitivity demands it, and actively invite agent crawlers to the pages you want AI systems to reference.

The training-versus-agent distinction is not a technical nuance for developers to resolve. It is the entire strategic framework, and it belongs in the same conversation as content planning, schema decisions, and answer engine optimization. Treating it as a security setting handled separately from marketing is how teams end up invisible in AI answers while believing they have protected their content.

Every major AI crawler in 2026: names, user agents, and purpose

Crawler

Company

Type

User-agent token

GPTBot

OpenAI

Training

GPTBot

OAI-SearchBot

OpenAI

AI search indexing

OAI-SearchBot

ChatGPT-User

OpenAI

User-triggered retrieval

ChatGPT-User

ClaudeBot

Anthropic

Training / broad crawl

ClaudeBot

Claude-User

Anthropic

User-directed retrieval

Claude-User

Claude-SearchBot

Anthropic

Search indexing

Claude-SearchBot

PerplexityBot

Perplexity

Search indexing

PerplexityBot

Google-Extended

Google

Generative-AI training control

Google-Extended

Googlebot

Google

Google Search

Googlebot

Meta-ExternalAgent

Meta

External AI data collection

meta-externalagent

Amazonbot

Amazon

Amazon discovery systems

Amazonbot

Applebot

Apple

Apple search and assistant

Applebot

Bingbot

Microsoft

Bing search and AI search inputs

bingbot

Last verified: October 2026. Crawler names, user-agent strings, IP ranges, and stated purposes change. Verify against each provider's published documentation before deploying production rules.

Google-Extended is the most misunderstood crawler on this list. It is not a separate bot crawling your site independently — it is a robots.txt control token that governs whether Google may use your content for Gemini-related training and grounding. Blocking it does not touch Googlebot or your Google Search rankings. A site can run User-agent: Google-Extended / Disallow: / alongside an open Googlebot rule and maintain full Google Search visibility. Marketers who conflate the two tokens create a false dilemma: they believe opting out of Google's generative AI training means opting out of Google itself. It does not. [3]

Perplexity splits its crawl functions across agents. PerplexityBot handles indexing and linking websites in Perplexity search results; separate retrieval mechanisms handle live fetches during user sessions. Perplexity publishes both its user-agent pattern and its IP address list, which makes verification straightforward. A rule targeting PerplexityBot alone does not govern every Perplexity access pattern, and assuming it does can leave gaps in both protection and visibility. [1]

OpenAI operates three distinct crawlers with three distinct purposes. GPTBot collects content that may contribute to model training. OAI-SearchBot supports ChatGPT Search indexing — allowing it makes a page eligible for retrieval in ChatGPT's search product. ChatGPT-User is triggered by an individual user action and fetches a page in response to a live request. OpenAI documents these controls separately: a publisher can block GPTBot while allowing OAI-SearchBot, preserving AI-search visibility while limiting training-data exposure. [4]

Anthropic follows the same three-part logic. ClaudeBot is associated with broad crawling and potential training use. Claude-SearchBot handles search-quality indexing. Claude-User retrieves pages in response to what a specific Claude user requests. Anthropic documents these separately, and blocking one does not block the others. [2]

Crawler impersonation is a real threat in 2026. One investigation found that roughly one-third of observed AI-crawler requests came from bots spoofing legitimate user agents — meaning a log entry claiming to be GPTBot may not originate from OpenAI at all. [4] A user-agent string is a claim, not proof of identity. Verify any suspicious bot: perform a reverse-DNS lookup on the requesting IP address, confirm the hostname belongs to the stated company, then run a forward-DNS check to confirm that hostname resolves back to the same IP. Compare the result with the provider's published IP ranges. Only after that sequence should you trust the claimed identity or apply a custom rate limit or allowlist.

AI crawler traffic is now material enough to monitor deliberately. In September 2026, one measurement dataset found Googlebot at 24.5% of AI-related bot traffic, Meta-ExternalAgent at 13.1%, ClaudeBot at 12.0%, Applebot at 8.5%, and GPTBot at 6.2%. [1] Search-purpose crawling, bots indexing for AI answer products rather than for traditional search; represented 10.6% of observed AI-bot requests that same month, up sharply from roughly 2–3% in January 2026. [1] The direction is unambiguous: treating AI crawlers as an edge case is no longer a defensible default.

How to manage AI crawlers: block, allow, or optimize

Robots.txt rules require a separate entry for each crawler. One directive does not cascade across related bots from the same company. A Disallow rule for GPTBot does not cover ClaudeBot, OAI-SearchBot, or Google-Extended — each requires its own entry.

# Block training crawlers from your entire site
User-agent: GPTBot
Disallow: /

User-agent: ClaudeBot
Disallow: /

User-agent: Google-Extended
Disallow: /

# Allow AI search and retrieval agents
User-agent: OAI-SearchBot
Allow: /

User-agent: Claude-SearchBot
Allow: /

User-agent: PerplexityBot
Allow: /

User-agent: ChatGPT-User
Allow: /

User-agent: Claude-User
Allow:

# Block training crawlers from your entire site
User-agent: GPTBot
Disallow: /

User-agent: ClaudeBot
Disallow: /

User-agent: Google-Extended
Disallow: /

# Allow AI search and retrieval agents
User-agent: OAI-SearchBot
Allow: /

User-agent: Claude-SearchBot
Allow: /

User-agent: PerplexityBot
Allow: /

User-agent: ChatGPT-User
Allow: /

User-agent: Claude-User
Allow:

# Block training crawlers from your entire site
User-agent: GPTBot
Disallow: /

User-agent: ClaudeBot
Disallow: /

User-agent: Google-Extended
Disallow: /

# Allow AI search and retrieval agents
User-agent: OAI-SearchBot
Allow: /

User-agent: Claude-SearchBot
Allow: /

User-agent: PerplexityBot
Allow: /

User-agent: ChatGPT-User
Allow: /

User-agent: Claude-User
Allow:

This configuration blocks training collection while preserving AI-search and retrieval visibility — the pattern most publishers with public content should evaluate first. Apply it selectively rather than site-wide: a company protecting proprietary research reports applies Disallow: / broadly; a brand that wants AI citations on its public editorial content applies Disallow only to gated, customer-only, or strategically sensitive directories.

The decision framework in three moves:

  1. Block training crawlers on proprietary, licensed, gated, or competitively sensitive content where the training trade-off is unfavorable.

  2. Allow agent and search crawlers on any page where an AI citation would generate discovery, qualified traffic, or brand exposure.

  3. Optimize allowed pages with structured data and direct-answer content so crawlers can interpret and quote them accurately.

Most published guides stop at step two. The third step is where the actual visibility outcome is determined.

Schema markup for AI belongs in step three, not as an afterthought. Article schema identifies editorial content and surfaces its author, publisher, and publication date — signals that answer engines use to assess freshness and authority. FAQPage schema marks up genuine question-and-answer pairs on a page, giving retrieval systems extractable passages that map directly to user queries. HowTo structures procedural content so steps remain intact during summarization. Organization establishes entity identity and trust relationships between author, brand, and topic. [3]

Schema does not guarantee citation. A page with perfect structured data but vague, unsupported claims will still be passed over. Schema is the signal; accurate, well-structured content with verifiable specifics is the substance that earns the citation.

Lean teams make two predictable errors with AI crawler settings. The first is setting a blanket block on all non-human traffic through a security preset, often applied by a developer or hosting provider without consulting the marketing team. The second is doing nothing, because robots.txt feels like a developer concern outside the marketing team's remit. Both choices leave visibility on the table. Robots.txt, page-level meta robots tags, canonical signals, internal links, XML sitemaps, and structured data operate as a connected layer — a change to one without reviewing the others creates gaps that can silently suppress pages that should be cited.

A third error, less discussed but equally damaging, is allowing crawlers to waste budget on parameterized URLs, thin archive pages, or duplicate content. Agent crawlers that spend requests on low-value pages may not reach the product, editorial, or FAQ pages where citation value lives. Canonical tags and a clean sitemap serve both traditional SEO and AI crawler efficiency.

Robots.txt is not access control. It expresses preferences to compliant systems. A malicious bot, a content scraper, or an impersonator operating outside the Robots Exclusion Protocol will ignore every rule in the file. Genuinely private content requires authentication, server-side authorization, a web application firewall, origin protection, and rate limiting — not a Disallow directive.

From being crawled to being cited: the AEO layer

A crawler visit is a prerequisite, not an outcome. An agent can fetch your page and still exclude it from the answer because the content is vague, poorly structured, buried under brand preamble, or unsupported by evidence a system can verify.

In September 2026, ChatGPT referrals represented 0.34% of tracked site traffic in one Ahrefs-based dataset, while Meta AI represented 0.05%, Gemini 0.02%, and Claude and Perplexity 0.01% each. [1] Those referral figures understate AI influence significantly, because many AI answers do not generate a click at all — the system summarizes the content and the user moves on. Citation presence and brand mention frequency matter independently of referral traffic volume. A coffee brand appearing in the answer to "best specialty coffee subscription in Australia" captures consideration even if the user never clicks through on that session.

Pages that earn citations share identifiable structural patterns. They lead with the direct answer rather than building toward it. They use descriptive headings that match the language of real user questions. They define specialist terms before layering on qualifications. They include verifiable specifics, named examples, dates, measurements, and source references; rather than generalizations. A relevant FAQ section, written against real queries rather than marketing language, gives retrieval systems extractable material that slots cleanly into AI answer formats.

Content that buries its main point in paragraph five, opens with a company history, or hedges every claim with promotional language consistently loses citations to plainer, more direct competitors — even competitors with lower domain authority. Retrieval systems optimize for the user's question, not for the brand's preferred narrative.

This is where traditional SEO and answer engine optimization converge, and where managing them as separate workstreams causes real damage. SEO builds the conditions for discovery: relevance, authority, indexing, crawlability, and internal link equity. AEO makes content extractable: direct answers, semantic heading structure, schema, and evidence a system can confidently quote. Running them in separate tools, owned by separate teams, with separate review cycles produces a specific failure mode — a technically accessible page that AI systems ignore because it reads like a press release, or a beautifully structured page that no agent crawler can reach because a blanket Disallow rule sits in robots.txt untouched.

Measure the full chain, not just traffic. Monitor crawler requests by user-agent in server logs, segmenting by URL to identify which pages attract which bot types. Track referral traffic from ChatGPT, Perplexity, Claude, and Gemini in analytics. Watch Search Console for impressions on the specific queries you are targeting. Test priority questions directly in major AI platforms and record whether your brand or URL appears in the answer, as a cited source, or not at all. Compare citation frequency before and after content updates, schema additions, or robots.txt changes so iteration is data-driven rather than speculative.

Crawl access is the input. Citation, qualified referral traffic, and downstream conversion are the outcomes that determine whether the crawl strategy is working.

AI crawler strategy for lean marketing teams

Small marketing teams face a specific structural problem: robots.txt, schema, content structure, and citation monitoring each require different expertise, and in a lean team nobody owns all four simultaneously. The result is usually a default — either the security team's blanket block applied at the CDN level, or the content team's benign neglect because AI crawlers feel like someone else's problem. Both defaults produce the same outcome: a site that is technically online but strategically invisible to the answer engines where a growing share of purchase intent now originates.

The highest-return first step is an audit for unintended blanket blocks. Check whether agent crawlers, OAI-SearchBot, Claude-User, Claude-SearchBot, PerplexityBot; can reach the pages generating the most business value. A quick scan of robots.txt combined with server-log filtering by user-agent reveals the actual access state, which frequently differs from what the team believes.

Once access is confirmed, prioritize schema before attempting a site-wide content overhaul. Adding accurate Article, FAQPage, and Organization schema to the top-traffic and highest-conversion pages is a high-return, bounded task that a single person can complete in a week. It does not require rebuilding the site or hiring a technical SEO. It does require that the schema accurately reflects visible page content — schema that marks up claims not present on the page creates inconsistency that systems can detect and penalize.

A repeatable workflow replaces the need for a dedicated technical SEO hire:

Publish structured content → verify crawler access → add schema → monitor citation signals → iterate.

Each step is bounded. Publishing structured content means leading with direct answers and including a genuine FAQ section. Verifying crawler access means checking robots.txt and log data monthly. Adding schema means applying markup to new priority pages at publication rather than in a periodic catch-up sprint. Monitoring citation signals means a weekly manual check of target queries in major AI platforms alongside analytics review. Iteration means making one change at a time and measuring the result before making the next.

Platforms that carry shared SEO, AEO, and content context reduce the coordination cost that kills this workflow in lean teams. When keyword research, content briefs, on-page optimization, and crawler decisions live in separate tools owned by separate people, changes in one area silently conflict with decisions in another. A developer adds a Disallow rule without knowing that a content brief targets that exact page for citations. A content editor rewrites a page without knowing the schema needs updating. Neither failure is dramatic — both quietly erode AI visibility over time.

Gyrify connects keyword research, content briefs, on-page SEO, schema workflows, and answer engine optimization in one system, so crawler and citation decisions happen in context rather than in isolation. For teams that want hands-on support, the Gyrify Operator tier provides a human running the weekly crawl audit, schema workflow, and AEO content calendar — the done-with-you model for teams where ownership is clear but time is not.

The goal of an AI crawler strategy is not maximum bot access. It is controlled access to the right content, paired with pages that are clear, structured, and authoritative enough that AI systems choose to cite them when the relevant question arrives.

FAQ

What is an AI crawler and how is it different from a regular search bot? An AI crawler fetches web pages either to build training datasets for AI models or to retrieve live content for an AI-generated answer. A regular search bot primarily constructs a keyword index for traditional search results, while AI crawlers may also collect training data or fetch pages in real time for a specific user question — two functions that require separate access decisions rather than a single uniform policy.

Should I block AI crawlers in my robots.txt? Not uniformly. Block training crawlers on proprietary, licensed, or gated content where you do not want your material used in future model training. Allow agent and search crawlers on public pages you want AI systems to discover and cite. A blanket block reduces AI-search visibility; doing nothing may expose content you intended to protect. The correct policy is per-crawler and per-content-type, not site-wide.

How do I stop GPTBot and ClaudeBot from crawling my site? Add a separate Disallow: / rule for each in your root robots.txt file — one entry for GPTBot and one for ClaudeBot. Confirm the changes appear correctly by fetching your robots.txt and checking server logs afterward. Remember that robots.txt instructs compliant crawlers; it does not block malicious bots, scrapers, or impersonators, and it does not replace authentication for genuinely private content.

What schema markup helps AI assistants cite my content in answers? Use Article for editorial content with clear authorship and publication dates, FAQPage for genuine question-and-answer pages, HowTo for procedural guides, and Organization for brand and author identity. Schema makes page meaning machine-readable and reduces ambiguity for systems deciding what to quote. Accurate, direct-answer content is the prerequisite; schema is the signal that reinforces it, not a substitute for substance.

How do I know if an AI crawler is indexing and citing my pages? Check server logs for verified crawler requests segmented by user-agent, monitor referral traffic from ChatGPT, Perplexity, Claude, and Gemini in analytics, and test priority questions directly in those platforms to observe whether your pages appear as cited sources. Search Console provides related search visibility data but does not report AI citations directly — manual query monitoring and referral tracking together give the most complete picture of whether your crawl strategy is producing citation outcomes.

Keep a good thought going

Stay in the loop

Fresh thinking on marketing, AI, and making more happen with a lean team.

The AI engine that brings your entire marketing function under one roof.
We'd love to work with you.

©2026 Gyrify - All rights reserved.

Stay in the loop

Fresh thinking on marketing, AI, and making more happen with a lean team.

The AI engine that brings your entire marketing function under one roof.
We'd love to work with you.

©2026 Gyrify - All rights reserved.

Stay in the loop

Fresh thinking on marketing, AI, and making more happen with a lean team.

The AI engine that brings your entire marketing function under one roof.
We'd love to work with you.

©2026 Gyrify - All rights reserved.