Research · 2 November 2026

Who blocks AI crawlers? robots.txt of the top 1,000 websites

We read the robots.txt of every domain in the Tranco top 1,000 and asked, for 16 AI crawlers, one question: may this bot fetch the homepage? The short answer: a quarter of big sites say no to someone, and most of them say no to training while keeping the door open to AI search.

27%

block at least one AI crawler (135 of 494 sites).

54%

of sites that block GPTBot still allow OAI-SearchBot (50 of 92).

25 of 92

GPTBot blockers leave Google-Extended, Gemini's training token, allowed.

2.8%

block all 16 AI crawlers, almost always with an "everyone but search engines" allowlist.

Which AI crawlers are blocked most

Share of the 494 sites with a robots.txt that still let Googlebot in, where the bot may not fetch /. Training crawlers lead; bots that fetch a page because a user asked for it and AI search bots are blocked about half as often.

Sites blocking each AI crawler at the homepage, %
  • Model training
  • AI search
  • User request
Bytespider 21.7
CCBot 21.3
GPTBot 18.6
ClaudeBot 18.4
Meta-ExternalAgent 16.6
Google-Extended 15.4
Applebot-Extended 15.2
PerplexityBot 14.2
Amazonbot 13.8
Perplexity-User 11.7
Claude-User 10.7
ChatGPT-User 10.5
DuckAssistBot 10.3
MistralAI-User 10.3
Claude-SearchBot 9.9
OAI-SearchBot 8.5

Scale 0–25%. Googlebot: 0%, Bingbot: 0.2%.

Show as a table
CrawlerOperatorPurposeBlockedNamed in robots.txt
BytespiderByteDanceModel training21.7%21.3%
CCBotCommon CrawlModel training21.3%23.3%
GPTBotOpenAIModel training18.6%26.3%
ClaudeBotAnthropicModel training18.4%24.9%
Meta-ExternalAgentMetaModel training16.6%17.0%
Google-ExtendedGoogleModel training15.4%22.3%
Applebot-ExtendedAppleModel training15.2%17.2%
PerplexityBotPerplexityAI search14.2%23.7%
AmazonbotAmazonModel training13.8%15.0%
Perplexity-UserPerplexityUser request11.7%12.3%
Claude-UserAnthropicUser request10.7%13.8%
ChatGPT-UserOpenAIUser request10.5%19.4%
DuckAssistBotDuckDuckGoAI search10.3%10.5%
MistralAI-UserMistralUser request10.3%7.7%
Claude-SearchBotAnthropicAI search9.9%13.6%
OAI-SearchBotOpenAIAI search8.5%17.4%

"Don't train on us, but do cite us"

The most common deliberate policy is a split. OpenAI and Anthropic each run separate crawlers for model training (GPTBot, ClaudeBot) and for their AI search (OAI-SearchBot, Claude-SearchBot), and robots.txt can treat them differently. Of the 92 sites that block GPTBot, 50 still allow OAI-SearchBot; of the 91 that block ClaudeBot, 42 still allow Claude-SearchBot. Overall 56 sites (11.3%) block at least one training bot and none of the four AI search bots.

Sites that block GPTBot but allow OAI-SearchBot include yahoo.com, ebay.com, medium.com, forbes.com, reuters.com, canva.com, snapchat.com and flickr.com: content and commerce sites that want to show up when someone asks ChatGPT a question, without their pages becoming training data.

The forgotten Google-Extended

Google-Extended is not a crawler but a robots.txt token: Googlebot fetches the page either way, and the token decides whether Google may use it to train Gemini. 25 of the 92 sites that block GPTBot do not block Google-Extended, so the one AI company that already crawls everything for search can still train on them. If the intent is "no training", the rule has to name every training token, not just OpenAI's.

Newer bots are rarely named

GPTBot is named explicitly in 26.3% of robots.txt files, ClaudeBot in 24.9%. Claude-SearchBot appears in only 13.6%, MistralAI-User in 7.7%. A bot that is not named falls back to the User-agent: * group, so sites that wrote their AI rules a year ago often allow the newer bots without having decided to.

Allowlists and partial rules

The 14 sites that block all 16 AI crawlers, including facebook.com, instagram.com, x.com, baidu.com, msn.com, threads.com, dailymail.com, usatoday.com and yelp.com, mostly do it the other way round: they disallow everyone with User-agent: * and then allow a short list of search engines by name. Twenty sites in the sample work this way, so a new AI crawler is blocked there from day one. reddit.com goes further: its robots.txt is a bare Disallow: / for every crawler, Googlebot included, so it falls outside the base of this study.

At the other end, 48 sites name GPTBot but leave the homepage open: they disallow only some sections. yahoo.com, for example, lets OAI-SearchBot crawl the site except article pages. This study counts such sites as allowing the bot, so the real share of restricted content is higher than the chart shows.

The top 100 block more often

In the top 100, GPTBot is blocked by 24.5% of sites (12 of 49 with a robots.txt that allows Googlebot); from rank 101 to 1,000 the share is about 18%. Several of the very largest domains, google.com, microsoft.com, youtube.com, apple.com and bing.com, block none of the 16 bots; their owners run AI products of their own. wikipedia.org is open to all of them as well.

Methodology

Download the data (CSV, 1,000 rows) — one row per domain with the HTTP status of robots.txt and an allowed or blocked verdict for each of the 18 bots. Free to reuse under CC BY 4.0 with a link to this page.

What does your robots.txt say?

Check any page against the same 16 AI crawlers in a few seconds. Free, no account.

Check my site