Can AI assistants read your site? robots.txt and AI crawlers
AI assistants can only talk about pages their crawlers can reach. What robots.txt does, which AI bots exist and how to decide what to allow.
When someone asks ChatGPT, Gemini or Perplexity which product to buy or which company to call, the answer is built from pages that the assistant's systems have read. If those systems cannot reach your site, they have very little to say about you, however good your pages are.
The first thing that decides whether they can is a small text file at the root of your site: robots.txt. Here is what it does, which AI crawlers exist, and how to decide what to allow.
AI crawlers are now a large part of bot traffic
In its review of 2025, Cloudflare reports that search engine crawlers made up 40% of verified bot traffic, and AI crawlers about half as much, 20%2.
Not all AI crawling is the same. Over a twelve-month period measured by Cloudflare, 80% of AI crawling was for training, 18% for search and 2% for user actions1. The group to watch is user actions: crawling for them rose more than 15x in 20252.
Three kinds of AI bots
It helps to sort AI crawlers by what they do with your pages:
- Training bots collect pages to train the models behind assistants.
- Search bots index pages so an assistant can find them and link to them. OpenAI's OAI-SearchBot, for example, is used to surface and link to websites in ChatGPT's search features2.
- User action bots open a page at the moment someone asks a question. ChatGPT-User visits pages when people ask ChatGPT questions2.
Some companies keep these jobs apart and others do not: Meta, OpenAI and Anthropic run separate bots for separate purposes, while Google and Microsoft each use a single crawler for several purposes1. Where the bots are separate, you can say no to training and still say yes to search.
What robots.txt can and cannot do
The Robots Exclusion Protocol behind robots.txt is formally defined in RFC 9309, and it lets site owners tell crawlers which parts of a site they may access2. The idea goes back to 1994, when it was first proposed as a way for site owners to control how crawlers access their content8.
It is a request, not a lock. The standard itself says its rules "are not a form of access authorization"8. Google puts it the same way: a robots.txt file cannot force a crawler to behave, it is up to the crawler to follow it7. Cloudflare calls it an honor system3.
Two practical points follow. robots.txt is mainly there to manage how much crawlers request from your site, and it is not the way to keep a page out of Google7. For private pages, use a password or a noindex rule instead.
Google: one crawler for Search, a separate token for Gemini
For Google Search, the control is the set of robots.txt rules for Googlebot, because AI is built into how Search works6. Block Googlebot and you leave Google Search altogether.
If you want a say over AI training and grounding in some of Google's other products, Google offers a separate token for that, Google-Extended6. It lets you decide whether content Google crawls from your site may be used to train future Gemini models5.
Most sites have not decided yet
Only about 37% of the top 10,000 domains seen by Cloudflare had a robots.txt file at all3. Of 3,816 top domains with such a file, 546, about 14%, had rules written for AI bots in particular4.
In 2025, AI crawlers were the user agents most often fully disallowed in robots.txt files, which means blocked from the whole site2. Blocking is a valid choice. The risk is blocking without meaning to: a rule written against training bots, or a broad rule copied from a template, can also shut out the bots that put you in AI answers.
A short checklist
- Open yoursite.com/robots.txt and read it. Make sure it does not block Googlebot or Bingbot by accident.
- Decide on training and on search separately. If you do not want your content used for training, block the training bots by name and leave the search and user action bots allowed.
- Do not rely on robots.txt to hide anything private. Use a password or noindex.
- Check again after every site change. A new theme, plugin or firewall setting can change what crawlers see without anyone noticing.
The OLAB Assist free scan checks whether your robots.txt blocks the AI search crawlers and the assistants' user agents, and whether your firewall turns them away even when robots.txt allows them.
Was this post useful?
Sources
Every figure in this post comes from the sources below. The date shows when we last checked each one.
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
Something wrong in this post?
We check every post for accuracy and general standards before it goes live. If we missed something, or you think this post infringes your rights or your brand's, tell us: we will review it and take it down if needed.