Allow AI crawlers in robots.txt so ChatGPT can cite the site
Review robots.txt for Disallow rules aimed at AI crawler user agents, which many sites added in 2024, and replace them with explicit Allow rules for the pages you want cited. Then check that your CDN or WAF does not block the same bots at the edge, since a robots.txt fix alone will not help if the request never reaches the origin.
Why this matters
A leftover block for AI bots in robots.txt can stop ChatGPT from reading or recommending your pages.
Before you start
- Access to the robots.txt file at the site root
- Access to CDN or WAF bot-management settings if one is in use
How to apply it
Open the live robots.txt
Fetch the robots.txt served on the production host, not a local copy, so CDN or app rewrites are included.
Check: A GET request to your production domain/robots.txt returns HTTP 200 with a text/plain content type.
Find AI crawler groups
Scan the file for user-agent groups naming OpenAI's crawlers and for any global Disallow that would also catch them.
Check: The file lists user-agent lines such as GPTBot, OAI-SearchBot or ChatGPT-User, each followed by its rules.
Replace blocks with explicit allow rules General best practice
Remove the Disallow under each AI crawler group you want to admit and add an Allow for the paths that should be readable, keeping unrelated bots untouched.
Check: robots.txt contains an Allow: / line under the target user-agent group and no Disallow: / for that group.
Check CDN and WAF bot rules General best practice
Inspect the CDN or WAF dashboard for a managed rule or toggle that blocks AI bots or verified bots, and disable it for the hosts you want crawled.
Check: The bot-management setting shows AI bot blocking disabled for the production hostname.
Confirm the crawler sees the allowed file General best practice
Re-fetch robots.txt from a different network or with a crawler user-agent header and compare it with what a browser sees.
Check: curl -A "OAI-SearchBot" your production domain/robots.txt returns the same Allow rules as the browser fetch.
Source: @denohawari on 2026-10-18 · original post · report an error