If you want AI assistants to be able to describe your business, the crawlers have to be allowed to read it. That permission lives in one file at yoursite.com/robots.txt, and the most common mistake is not a missing rule but a rule further down the file quietly overriding a permissive one above it.
GPTBot — OpenAI's crawler.OAI-SearchBot — OpenAI's search crawler, separate from GPTBot.ClaudeBot — Anthropic's crawler.PerplexityBot — Perplexity's crawler.Google-Extended — Google's AI-usage control; it does not affect ordinary Search crawling.Bytespider — ByteDance's crawler.A crawler obeys the most specific group that names it, not the first permissive one it finds. So this file blocks ClaudeBot, no matter how welcoming the top looks:
User-agent: *
Allow: /
User-agent: ClaudeBot
Disallow: /When we report that a site blocks an agent, this precedence is why — we evaluate the group that names the agent, exactly as the crawler does.
User-agent: *
Allow: /
User-agent: GPTBot
Allow: /
User-agent: OAI-SearchBot
Allow: /
User-agent: ClaudeBot
Allow: /
User-agent: PerplexityBot
Allow: /
Sitemap: https://yoursite.com/sitemap.xmlNaming each agent with an explicit Allow is redundant against a permissive wildcard, and it is worth doing anyway: it states the intent, and it survives someone later adding a blanket block.
Removing a block lets a crawler in. It does not schedule a visit, and it does not put you in the index an assistant searches. If nothing links to your site, allowing the crawler changes nothing on its own — the crawler still has to find a reason to come.
At the root of the domain: https://yoursite.com/robots.txt. It applies to that hostname only, so a subdomain needs its own.
No — the opposite. If the file is absent, everything is permitted. Absence is permission with the intent simply unrecorded.
No. Google-Extended governs AI usage, not ordinary Search crawling, which follows the Googlebot rules instead.
The named crawlers above publish that they follow robots.txt. It is a convention rather than an enforcement mechanism, so it is not a security control — use real access control for anything private.
Where does your site stand? The scan is free, takes about 60 seconds, and needs no account. It fetches your homepage exactly the way GPTBot, ClaudeBot and PerplexityBot do and tells you what they receive.