Which AI bots crawl websites
AI companies run three kinds of bots. Some collect text for training: GPTBot (OpenAI), ClaudeBot (Anthropic), CCBot (Common Crawl). Others index pages for AI search: OAI-SearchBot, Claude-SearchBot, PerplexityBot. The third kind opens a page when a user asks: ChatGPT-User, Claude-User, Perplexity-User.
How to block AI training but stay in AI search
Block the training bots and leave search and user bots open: that's the preset the generator starts with. Google-Extended and Applebot-Extended are control tokens: they stop Google and Apple from training models on your site without removing it from regular search. Google-Extended doesn't affect AI Overviews, which use the regular index.
Why allowed bots have to be listed separately
Under RFC 9309, a crawler follows only the most specific group that names its user agent and ignores User-agent: *. Close /admin/ to everyone, add an “allow OAI-SearchBot” group, and /admin/ is open to that bot. The generator repeats the shared Disallow rules in the allowed bots' group.
User-agent: OAI-SearchBot
Allow: /
Disallow: /admin/
User-agent: *
Allow: /
Disallow: /admin/What robots.txt can't do
Only well-behaved crawlers follow robots.txt, and user-initiated requests sometimes skip it. Real protection needs rules at the server or CDN. Google caches the file for up to a day, and on a 5xx response many crawlers pause crawling the site.